Antivirus vendors had to patch vulnerability allowing data-wiping attack

[Jan]

Huge security flaw let attackers trick antivirus software into wiping legitimate data

SafeBreach cybersecurity researcher Or Yair has found a way to exploit antivirus quarantine features to turn them into data wipers.

Yair managed the feat using endpoint detection and response (EDR) and antivirus (AV) software from Avast, AVG, Microsoft, SentinelOne, and TrendMicro.