Tag: BYOVD
Lunex stealer blinds endpoint defenses with a vulnerable AMD driver
A steal-everything platform called Lunex disables endpoint defenses through a vulnerable AMD driver before it grabs browser and wallet data.
A fake LastPass page ships a signed driver that kills security tools
A GitHub page posing as the LastPass Authenticator installs a Microsoft-signed kernel driver that terminates 145 security processes before a…
Settra ransomware pairs stolen VPN logins with RMM persistence
A new ransomware strain enters through VPN credentials and hides behind RMM agents.
Cambodia RAT campaign weaponizes vulnerable driver to gut defenses
Acronis says a Cambodia-targeting campaign loads a vulnerable OPSWAT driver to kill security tools and drop Spark RAT.
SPECTRE backdoor shows how AI sharpens mass web server raids
Cisco Talos details UAT-10147, a Chinese-speaking crew that leans on AI tooling and a new SPECTRE implant to hit web…
Defender boot driver opens kernel file writes on all Windows versions
Check Point weaponizes Microsoft's signed BTR.sys driver to run kernel-level operations with no flaw exploited.
Signed Lenovo Driver Exploited to Kill Security Software
A legitimate signed Lenovo driver contains a security flaw that lets low privileged users terminate any process, including EDR and…