Forest Global Training Partners

Cyber Risks · Krebs on Security

Carbon Emissions: Oversharing Bug Puts Security Vendor Back in Spotlight

Summary: Carbon Black warned customers that an internal review found a separate bug in its Cb Response product that could cause benign customer files, such as Microsoft Word, PDF and .TXT documents, to be miscategorized as executable files and inadvertently uploaded to VirusTotal for scanning. CTO Mike Viscuso said the bug affects a small percentage of customers who enabled VirusTotal submissions and run Cb Response on Mac OS alongside specific third-party applications, citing Spotify reading a configuration file as one trigger, and that the bug was introduced in the Mac version roughly three months earlier.

What you should know: The flaw turns a security tool into the exfiltration path: VirusTotal lets paying customers download any file submitted by other users, so a misclassified Word or PDF file leaves your environment and becomes retrievable by anyone with a paid VirusTotal account.

Read the original at Krebs on Security ↗

Topics
Malware
Related