And yes, dropping development of new products is not the same as dropping support for old ones, so this makes more sense (though the arguments I’m making about the tradeoffs between supporting platforms still apply).Īpogee Electronics will no longer develop products for the Microsoft Windows platform. Guess Apogee is either reading CDM, or they just got some email about that subject header. IMMEDIATE: Please revise headline to read “Apogee Discontinues Windows Development” But in a press release entitled “Apogee Discontinues Windows Support,” “Apogee Discontinues Windows Development,” Apogee decides to tell you why, if you’re using Windows, you’re using an inferior platform.Ĭorrection: Apogee just sent an updated press release.ĪTTENTION ALL RECIPIENTS: Correction to Apogee’s most recent press release titled “Apogee Discontinues Windows Support”. Now, that’s their prerogative – not least because customers who prefer using Windows can simply choose to buy their competitors’ products. He also noted that Microsoft is moving toward Progressive Web Apps that "would mitigate many of the concerns currently brought by Electron.Maybe it was aesthetically incompatible with ugly PCs.Īpogee Electronics has just announced they’ve dropped support development for Windows.
However, threat hunter John Bambenek told Dark Reading it could provide a secondary means for "lateral movement" in the event of a network breach. When informed by cybersecurity news site Dark Reading of the vulnerability, Microsoft said it "does not meet our bar for immediate servicing as it requires an attacker to first gain access to a target network," adding that it would consider addressing it in a future product release. As such, Vectra recommends not using the desktop app until a patch is created, and using the web application instead. The problem is mainly limited to the desktop app, because the Electron framework (that essentially creates a web app port) has "no additional security controls to protect cookie data," unlike modern web browsers. "Assuming full control of critical seats–like a company’s Head of Engineering, CEO, or CFO - attackers can convince users to perform tasks damaging to the organization." Vectra created a proof-of-concept exploit that allowed them to send a message to the account of the credential holder via an access token. Attackers can tamper with legitimate communications within an organization by selectively destroying, exfiltrating, or engaging in targeted phishing attacks.
0 kommentar(er)
