PS: If you have a Dell computer, you may want to fix this SupportAssist vulnerability now.

Your new Windows laptop usually comes with a considerable amount of unnecessary bloatware. Often, it slows down your computer a bit. However, sometimes a preinstalled workpiece poses a serious security risk. That's why you should probably update or uninstall Dell SupportAssist immediately.

The application, which according to the Dell support page is preinstalled on "most new Dell devices running Windows" and qualified as "the industry's first automated proactive predictive support technology," has been vulnerable to hackers since. at least Last October, according to Bill Demirkapi, a 17-year-old security researcher. It is not clear why it is only corrected for the moment.

This is a potential problem: Dell SupportAssist has administrator access for Windows and is designed to automatically install updates to your computer. Demirkapi has found a way to divert these requests for updates. your PC. You can read everything and see a proof of concept in his blog post.

On the positive side, Demirkapi said ZDNet that it only works if the hacker is on the same local network as your PC, say the public Wi-Fi of your Starbucks, your workplace or your school. And the repair should be as simple as uninstalling the application or updating to SupportAssist version 3.2.0.90 or later. You can find the installer on the Dell Support page for the vulnerability here.