So detonating these things inside virtual machines, that
gives us that quarantine capability.
There're VM escapes and sandbox escapes that are published,
and I understand that sometimes it's talking about the Window
systems and sandbox browsers and that kind of thing that's
kind of underlying kernel activity,
but it can also apply to escaping virtual machines into a host. Right.
So is that something that we need to be concerned about as well?
You do need to keep that in mind.
There are exploits available for virtual machine software,
where the malware can try to escape from the guest into your host,
and obviously you want to avoid that.
So the things that I'll say about that is,
first off, whatever system you're using to run your virtual machines on,
don't make that a system that you care about. Don't make this your
corporate laptop with all of your sensitive documents on it.
Don't make it some system that if it gets completely compromised
with malware that you can't just re‑image it.
The second is really the virtual machine escapes that I've
seen in malware tend to be pretty old,
and they all tend to be based on exploits that are available in
various pieces or versions of VM software,
especially the virtual machine tools that typically
get installed into the guest OS.
So as long as you keep your systems up to date and your
virtual machine software up to date, you should be okay.
Absolutely.
I've seen a ton of stuff published even for Workstation Pro.
Actually,
when I went to the 1903 Update on Windows, it wouldn't let
me keep, and maybe that's a brand thing,
too,
but it wouldn't let me keep Workstation Pro 14 on my device as
I upgraded. I actually had uninstall it,
install a newer version of Workstation Pro because it said it had
vulnerabilities in it. So that's kind of interesting, and I guess
plus one for Microsoft for carrying about.
Oh, yeah.
Helping you, making sure that you're not going to accidentally
compromise yourself because you have vulnerable software.
Right.
So that was pretty cool.
So another thing, use a hypervisor, use one you're
comfortable with, and use one that's updated.
Yeah, make sure you keep it up the date.
Obviously, don't go downloading pirated software because
those could have back doors in it as well.
And that's just going to mess up your system to begin with.
But just make sure, the biggest thing is make sure that your tools
and your virtual machine software is up to date.