Flashpoint پنجشنبه ۷ آبان ۱۴۰۵ · ۲۳:۳۴

DefenderKiller: How Vulnerable Drivers Are Being Abused to Disable Endpoint Security

Flashpoint analysts examine an open-source EDR killer that exploits a legacy Microsoft driver to terminate security processes, including modified variants of the original proof of concept. The post DefenderKiller: How Vulnerable Drivers Are Being Abused to Disable Endpoint Security appeared first on Flashpoint.

Malware & Threats Ransomware Threat Intelligence Open Source

Read the full article at Flashpoint Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Wordfence Blog پنجشنبه ۷ آبان ۱۴۰۵ · ۲۲:۵۰

Wordfence Bug Bounty Program Monthly Report – July 2026

In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These submissions are reviewed, triaged, and processed by the Wordfence Threat Intelligence team, with validated vulnerabilities responsibly disclosed to vendors, often through the Wordfence Vulnerability .…

Vulnerabilities & Zero-Day Threat Intelligence Penetration Testing

منبع

Graham Cluley پنجشنبه ۷ آبان ۱۴۰۵ · ۲۰:۳۱

BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center

Ambulances were diverted, surgeries cancelled, and medical students sent home from classes after a ransomware group attacked the University of New Mexico's Health Sciences Center (HSC) this week. Read more in my article on the Fortra blog.

Malware & Threats Data Breach Ransomware

منبع

Help Net Security پنجشنبه ۷ آبان ۱۴۰۵ · ۱۹:۵۵

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that attackers are crashing its firewalls with a newly disclosed vulnerability. VMware ESX zero-day helped Chinese spies cover their tracks Chinese APT group Warp Panda has leverage…

Vulnerabilities & Zero-Day Threat Intelligence Operating Systems

منبع

Microsoft Security Blog پنجشنبه ۷ آبان ۱۴۰۵ · ۱۹:۳۰

Tracking AI adoption in North Korean threat actor tradecraft

As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified North Korean threat actors expanding their use of AI with varying levels of adoption. This blog breaks down how North Korean threat actors are utilizing AI across their operations, reflecting a broader trend of threat actors incorporating AI into their attack chains…

Threat Intelligence

منبع