Some of the largest antivirus software providers have warned users to update their platforms immediately to stay safe from worrying security threats.
Bitdefender and Trend Micro both issued high-severity notices to update after Man-in-the-Middle and Local Privilege escalation vulnerabilities were found to expose customers.
A total of six Common Vulnerabilities and Exposures (CVEs) were listed, five of which relate to Bitdefender and one for Trend Micro Deep Security Agent – users of Bitdefender Total Security were advised to use version 27.025.115 or newer to protect themselves, and Trend Micro Deep Security Agent users are advised to use product version 20.0.1-17380.
Stay informed
Although Trend Micro only addresses one vulnerability, it is a serious cybersecurity issue as local privilege escalation means standard users can gain system-level access due to insufficient control over authentication processes.
The five vulnerabilities patched by Bitdefender stemmed from the HTTPS scanning feature, which failed proper certificate verification. This could allow threat actors to intercept communications between users and sites by inserting themselves into Internet connections in a ‘Man-in-the-middle’ attack.
Since the pandemic, cyber attacks have become increasingly common, and CVE is expected to grow by 25% this year – which equates to approximately 2,900 new vulnerabilities per month. Shockingly, about 45% of all CVEs reported in 2023 were unpatched, leaving users exposed.
Security flaws happen, and they always will. The best thing you can do to keep your systems and your business secure is to patch as soon as possible and ensure you’re running the latest version of your software to reduce risk.
Via Heise
