Malware identified in CCleaner 5.33

Re:Malware identified in CCleaner 5.33 by 0xfeba on Monday September 18, 2017 @10:38AM (#15276317)

Free and non-free AV are liabilities at this point (for Windows). Microsoft has never had an official way to let AV hook into the system calls needed, so they all relied on hacks and shifty stuff.

Surprise, surprise, now there is more attack surface available since AV is kernel level. And so now we see attacks getting root or kernel level access via AV vulnerabilities.

[ Parent | on HN ]

Re:Malware identified in CCleaner 5.33 by srcmap on Monday September 18, 2017 @12:03PM (#15277040)

Unfortunately attack surface on AV also includes Windows Defender itself:

https://arstechnica.com/information-technology/2017/06/lates...

[ Parent | on HN ]

Re:Malware identified in CCleaner 5.33 by nugget on Monday September 18, 2017 @12:18PM (#15277173)

This is why security mono-culture is dangerous and it's in our interest to maintain a diverse ecosystem of security vendors in every area. Security is hard and anyone can have a serious vulnerability.

[ Parent | on HN ]

Re:Malware identified in CCleaner 5.33 by Dylan16807 on Monday September 18, 2017 @01:10PM (#15277632)

I'll still take 1-2 vendors that actually have security as a top priority over a variety of vendors that care plenty about features and detection rates but not about actually hardening their code.

[ Parent | on HN ]