Important Security Update — CIS Kill Switch and Cleaning Essentials

Comodo Internet Security - CIS
1

We want to let our community know about a security issue we’ve identified and the steps we’re taking to address it.

The issue: The Kill Switch feature (available through Comodo Cleaning Essentials and within CIS) has been found to be vulnerable. Until a permanent fix is available, we’re advising all users not to use Kill Switch.

What we’re doing:

  1. We removed all download links for CCE which contained the vulnerable Kill Switch.
  2. For CIS, we will be releasing an updated installer that ships without Kill Switch and without Cleaning Essentials. This removes the vulnerable component while we work on a permanent fix. Note that this new installer only affects new/future downloads — it does not change anything on versions already installed.
  3. For existing CIS users, we will provide a script that removes both Cleaning Essentials and Kill Switch from your current CIS installation. We recommend running this script and avoiding Kill Switch until further notice.

What’s next: Once the underlying vulnerability in Kill Switch is fixed, we’ll re-enable Cleaning Essentials and reintroduce Kill Switch support within CIS.

We’ll follow up with the download link for the updated installer and the removal script as soon as they’re ready. Thank you for your patience while we get this resolved.

4 Likes
2

Thanks for letting us know! Any idea when the removal script update will be pushed out?

FYI for those with the New UI, manually clicking Update under Protection main menu will include a check for program updates. If your using the Lycia Theme, clicking the Update button in the Basic View (not the one on the Advanced View) it will also check for program updates. Otherwise, it will automatically check once a day by default.

image
image1368×904 148 KB

image
image1146×691 111 KB

I’m removing Watch Activity aka KillSwitch from the basic menu so I remember not to use it in the interim.