2 ms·
Their fix is apparently to not leak machine-unique UUIDs but UUIDs unique to the version of the AV. Thanks Kaspersky for leaking if the users AV is vulnerable t
by zaarn 7y ago
Their fix is apparently to not leak machine-unique UUIDs but UUIDs unique to the version of the AV. Thanks Kaspersky for leaking if the users AV is vulnerable to exploits!
- lonelappde 7y agoThat's not really a big deal. The attackers can just be indiscriminate and hit a good number of vulnerable instances. And it's already pretty standard for clients to send used agent versions.
- zaarn 7y agoWell, it is, because you can now deploy much more targetted payloads, which means you can hit even more instances with a little bit of extra work, comparatively.