4 ms·
The CVE has been discovered by a security researcher/firm, rather than being found in the wild. Without technical details or a PoC being publiclya available, I
by mylastattempt 2y ago
The CVE has been discovered by a security researcher/firm, rather than being found in the wild. Without technical details or a PoC being publiclya available, I doubt this will amount to more than just another starting point for someone to developer a new exploit. In a year or so it might show up in your Metasploit bundle.
- jakeogh 2y agoIts a odd to take any assertion that "it wasn't seen in the wild" as if in the opposing frame(s) it wasn't "our best technique for over a decade". Like any valuable secret, the incentives are in the other direction on both sides.
- sidewndr46 2y agoI don't think that is a realistic conclusion. If one group found it, we can assume that there exists at least one other group that is capable of finding. It therefore is not unrealistic to believe this has seen limited exploitation by sufficiently motivated actors.
- zer0c00ler 2y ago[dead]
- acidictadpole 2y ago> The CVE has been discovered by a security researcher/firm, rather than being found in the wild. The researcher/firm was the one that disclosed it, but I don't feel like you could conclusively say that the exploit isn't in the wild.
- deleted 2y ago[deleted]
- fulafel 2y agoYes, it's sometimes hard to keep in mind that vulnerabilities don't just materialze into existence when they're first publicized. It's a differnt picture, everyone is vulnerable all the time.