Cyber Risks · Krebs on Security

Wiki Leaks: We’ll Work With Software Makers on Zero-Days

Summary: WikiLeaks dumped thousands of files documenting CIA hacking tools on Tuesday, and on Thursday editor-in-chief Julian Assange said the organization would give hardware and software vendors exclusive access to additional technical details so fixes could be developed before further publication. Assange said WikiLeaks would publish more details once the material is "effectively disarmed," and a WikiLeaks Twitter poll drew just over 38,000 responses, with 57 percent saying the group should work directly with tech companies and 36 percent saying no.

Bottom line: The documentation already released may point skilled hackers toward unpatched flaws, and WikiLeaks has not said whether it will deal with affected vendors individually or through third parties - so the window between disclosure and patch is the exposure your organization is carrying.

Read the original at Krebs on Security ↗

Topics
Zero-Days & Exploits
Related