3 ms·
> valuable, not-yet well understood, and public exploits Except in the scenario that is this exact case: Supply chain attacks that are developed with the explo
by maerF0x0 3y ago
> valuable, not-yet well understood, and public exploits
Except in the scenario that is this exact case: Supply chain attacks that are developed with the exploit in mind.
- Hackbraten 3y agoI agree in principle. But even if the backdoor is deliberate (as is the case here), there’s limited risk for the average person. Nobody in their right mind is going to attack Jane Doe and risk burning their multi-million dollar exploit chain. For an old vulnerability, however, any unpatched system is a target. So the individual risk for the average unpatched system is still orders of magnitude higher than in the former scenario.