• Cimpanu: An older (pre-April 23) version of Dell SupportAssist is vulnerable to a remote attack

    Let’s hear it for the bloatware. From Catalin Cimpanu at ZDNet:

    A vulnerability in the Dell SupportAssist utility exposes Dell laptops and personal computers to a remote attack that can allow hackers to execute code with admin privileges on devices using an older version of this tool and take over users’ systems. Dell has released a patch for this security flaw on April 23; however, many users are likely to remain vulnerable unless they’ve already updated the tool

    It’s the old bad-JavaScript-on-a-web-page can take over your system problem.

    I wonder how long until somebody figures out how to inject malware via Candy Crush?

    Thx @Kirsty