It was recently reported that the hacking group Fxmsp "...claimed to have secured access to three leading antivirus companies," and that they "...extracted sensitive source code from antivirus software, AI, and security plugins belonging to the three companies." Further, the group is:
...[O]ffering to sell it, and network access, for over $300,000 USD.
Reporting on this revelation, a Forbes.com article warned that:
Access to the source code allows hackers the opportunity to locate showstopping vulnerabilities and exploit them, rendering the software useless... or worse. They could even turn what was once legitimate protection from malware into an incredibly effective spying tool.
The report doesn't mention who the compromised security vendors are nor could I find any indication this information has been publicly released.
Which leads to my question. What if my organization is running the compromised security software? What can we do to protect our environment? Are there best-practices that even envision a scenario like this?