|
BadUSB
The policy control of losing rank/clearance is appropriate given the severity of the bug.
This is because much more nefarious items than viruses can be brought into a SCIF due to this.
This bug is really bad because it can use the USB ID assigned to one device and operate surreptitiously as another, e.g. data collection and surveillance by operating as a keyboard and running scripts to remove data from a machine.
|