Cyber Risks · Krebs on Security

Anti-virus Products Mostly Ignore Windows Security Features

Summary: A Krebs on Security test of a dozen top anti-virus suites on Windows Vista found that AVAST, AVG, BitDefender, ESET, F-Secure, Norton, Panda and Trend Micro used neither ASLR nor DEP, while Microsoft Security Essentials was the only product to use both consistently. Vendors including F-Secure, Panda, Bitdefender, Symantec and ESET responded that the protections were on their roadmaps, unnecessary, or planned for later releases.

Why it matters: Security products are themselves software with exploitable flaws, and eight of the twelve suites tested left both memory protections off, so the tools sold to block attacks were not using the defenses Microsoft built into the operating system.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related