Vault7 and the CIA: This is why we need EMM

Originally published at: https://bayton.org/2017/03/vault7-and-the-cia-this-is-why-we-need-emm/

In a post-Snowden world, the recent Wikileaks dump exposing myriads of vulnerabilities and the tools the CIA use to exploit them across iOS, Android, Windows and the wider connected ecosystem shouldn’t be all that surprising. This is, after all, what these secretive government agencies do in order to do their jobs effectively. A look at my last This is why we need MDM article shows this mentality is widespread throughout various agencies. Some may be focusing on the ethics of their behaviour here, but there’s a more concerning issue at hand; in making this information available to the public, Wikileaks has armed the general population with some of the tools necessary (Wikileaks redacted a number of them) to do everything the CIA, GCHQ and the others have been doing with alarmingly little effort, and this is bad. Impacted companies are rushing to patch the previously undisclosed vulnerabilities with Samsung, Microsoft and Apple having all responded in the hours following the leak: We are aware of the report in question and are urgently looking into the matter – Samsung We are aware of the report and are looking into it – Microsoft While our initial analysis indicates that many of the issues leaked today were already patched in the latest iOS, we will continue work to rapidly address any identified vulnerabilities. We always urge customers to download the latest iOS to make sure they have the most recent security update – Apple Google, whose Android OS is one of the most…