RE: https://infosec.exchange/@cR0w/117161837519266091
I have so many feelings about this Unifi security bulletin. I will not emphasize the "it's bad" part, because that's obvious enough.
There are two mitigating factors to keep in mind here:
1. The whole industry is getting a super aggressive massively subsidized security scan from "AI".
2. Unlike basically every other piece of prosumer networking gear I've owned, Unifi auto-updates reliably, when I read one of these, I log in to my controller to find the patches *already applied*.