Bring Your Own Vulnerable Driver attack - CIS case