WikiLeaks began publishing Vault 7, a large set of documents it said came from the US Central Intelligence Agency. The files described tools and techniques for compromising smartphones, computers, and internet-connected televisions. The CIA declined to comment on the documents’ authenticity but criticised their release.
What happened
- The first release, called Year Zero, was published on 7 March 2017 and contained thousands of pages.
- The documents described methods for targeting iOS, Android, Windows, and some Samsung smart TVs.
- Technology companies said many of the vulnerabilities described had already been fixed.
- A former CIA software engineer, Joshua Schulte, was later convicted in connection with the leak.
Why it mattered
Vault 7 was one of the largest leaks of intelligence agency material, and it intensified the debate over governments stockpiling vulnerabilities rather than disclosing them to vendors. It also raised questions about how securely intelligence agencies protect their own tools.
Lessons for organisations
Insider risk controls, such as least-privilege access, monitoring of privileged users, and secure development environments, are as important as defences against external attackers. Keeping devices patched limits exposure when exploit details become public.
Source: BleepingComputer
Part of our Top stories archive of headline-making events in information security, privacy, and AI. If you would like help applying the lessons to your organisation, contact us.
