KHOBE 'Quake' Vulnerability Threat Failed to Shake the World

There has been a big hype in the security press about an attack dubbed KHOBE that was reportedly able to bypass AV protection.

A report by a firm called Matousec claims that "today's most popular security solutions simply do not work." Furthermore, the KHOBE vulnerability was slated to avoid detection from most popular antivirus applications.

The attack is described by Matousec researchers as an "8.0 earthquake for desktop security software", describes a highly potential bypass in the way some parts of some anti-malware products operate on some versions of Microsoft Windows.

The truth is somewhat different. KHOBE is not really a way that hackers can get malware onto your computer. Matousec describes a way of "doing something extra" if the bad guys' malicious code manages to get past your anti-virus software in the first place. In other words, KHOBE is only an issue if anti-virus products fail to detect malware.

Security experts are now saying that the fuss around KHOBE is unwarranted, and could be easily be called scaremongering, because all Matousec proclaims is that the KHOBE threat is simply malware which can already bypass anti-virus software and may be able to bypass it again.

Should these AV software vendors thank or even reward independent researchers for making these discoveries and essentially helping them to discover new vulnerabilities? Have made sure that you are using an updated malware remover to keep your system is safe from all threats including KHOBE?