AV and EDR products turned into data wipers... lovely!

[Sky-Knight]

Antivirus and EDR solutions tricked into acting as data wipers

A security researcher has found a way to exploit the data deletion capabilities of widely used endpoint detection and response (EDR) and antivirus (AV) software from Microsoft, SentinelOne, TrendMicro, Avast, and AVG to turn them into data wipers.

www.bleepingcomputer.com

And for those relying on Windows Defender please note, this issue was fixed in the Oct update rollup. So assuming you're actually patching your junk, this is already fixed. Still... a terrifying bug.

To see Sentinel One on that list is an eye opener too.

 

[britechguy]

It just goes to prove the old truism that all computer security is a game of cat and mouse and there is always going to be "the next vulnerability" to exploit.

The current vulnerability gets patched. Lather, rinse, repeat.

 

[sapphirescales]

This is why having a backup is so important. There are so many things that can happen that can cause you to lose all your stuff, even things we didn't know were possible. There will be continued threats to our data in the future so you'd better have it all backed up in multiple locations if you don't want to lose your stuff.