A Hacker's Mind: How the Powerful Bend Society's Rules, and How to Bend them Back

by Bruce Schneier

I’m writing this paragraph in May 2022, and here are three vulnerabilities that recently appeared in the press: •Cisco announced multiple vulnerabilities in its Enterprise NFV Infrastructure Software. One vulnerability could allow an attacker to jump from a guest virtual machine to the host machine, and thereby compromise the entire host network. •Cloud security company F5 warned its customers of forty-three vulnerabilities affecting four of its products. One “may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services.” •AVG Corporation announced details of two high-severity vulnerabilities in its antivirus products that had been lurking in the code since 2012. Both flaws could enable attackers to disable security software or tamper with a client’s operating system.