Application isolation and virtualization provide a false sense of cybersecurity

Application isolation and virtualization provide a false sense of cybersecurity
January 21, 2020
https://www.scmagazine.com/home/opi...ation-provide-a-false-sense-of-cybersecurity/

 

Yeah, if I really care about isolation, it's on a different machine, which is on a different LAN.

 

So they found a vulnerability in QEMU. Buy them a beer. In what way does that justify the click-bait title of the article, which implies that isolation and virtualization is inherently vulnerable?

 

I think they are talking about high-value targets, because usually malware that average Joe Doe may be a victim of don't have any 0-day exploits.

 

Yes, that makes sense.

 

Exactly my thoughts. It's just like saying that AV's give a false sense of security because they can't block all malware. Nothing is bulletproof, but if used correctly, app virtualization can be quite secure. Think of Sandboxie for example.