Tag: Black Hat
Defender boot driver opens kernel file writes on all Windows versions
Check Point weaponizes Microsoft's signed BTR.sys driver to run kernel-level operations with no flaw exploited.
Same-network attacker can hijack TCP sessions via NAT flaw
NatJack attacks break the NAT trust model, letting same-network attackers hijack TCP sessions and poison DNS.