It seems like Wikileaks have opted to release previously not released source code from vault 7 projects under the name vault 8.
Most vendors already assessed vault 7 and searched for possibly used exploits based on the already available information - and all vendors that did release press releases did say they fixed vulns - and Wikileaks themselves said they were holding back on sources until the vulns are patched.
What is the point of releasing (and reading) the sources when the vulnerabilities are probably already fixed?
Is it just for more detailed IoCs or is it likely to contain additional vulnerabilities and be reused like for example eternal blue?
Wikileaks especially says
Digital certificates for the authentication of implants are generated by the CIA impersonating existing entities. The three examples included in the source code build a fake certificate for the anti-virus company Kaspersky Laboratory, Moscow pretending to be signed by Thawte Premium Server CA, Cape Town. In this way, if the target organization looks at the network traffic coming out of its network, it is likely to misattribute the CIA exfiltration of data to uninvolved entities whose identities have been impersonated.
Should that CA be considered untrustworthy now?