Maybe don't install crap on your dev machine if you're not going to keep it updated.
Blame a normal person? Nah. A senior engineer with keys to the castle? They should really know better.
> The blame simply is on not practicing proper isolation and keeping work to a secure and controlled environment.
Who is responsible for setting this up?