Symantec endpoint zero-day unpatched for months

The vulnerability allows an attacker to attain arbitrary hard disk read and write access at sector level, and subsequently infect the target and gain low level persistence (MBR/VBR). They also allow the attacker to execute code in the context of the built-in SYSTEM user account, without requiring a reboot.

from Google Alert - vulnerability http://ift.tt/2jVVwdY
via IFTTT