EDR – Page 3 – Computer Security Articles

3 benefits of ThreatDown bundles

November 17, 2023 admin Business, EDR

Learn how ThreatDown bundles help IT teams save time, money, and stop more threats.

Measures to improve cyber-resilience of an organization | Kaspersky official blog

July 20, 2023 admin backups, Business, cyber resilience, cyber-resiliency, EDR, enterprise, mfa, passwords, patches, strategy

Credit to Author: Stan Kaminsky| Date: Thu, 20 Jul 2023 17:48:42 +0000

Basic measures to protect against hacking and improve business cyber-resilience.

Security Sophos

Microsoft Revokes Malicious Drivers in Patch Tuesday Culling

July 11, 2023 admin 2023-07, anti-edr, drivers, drivers.stl, EDR, Featured, fivesys, fk_undead, fu rootkit, netfilter, Patch Tuesday, patches, rootkit, sophos x-ops, threat research, uac, wfp, windows filtering platform, Windows update

Credit to Author: Andrew Brandt| Date: Tue, 11 Jul 2023 17:20:38 +0000

In December 2022, Microsoft published their monthly Windows Update packages that included an advisory about malicious drivers, signed by Microsoft and other code-signing authorities, that Sophos X-Ops (and others) observed threat actors abusing during attacks. Today, Microsoft issued Security Advisory ADV230001 as part of their July Windows Update that addresses Sophos’ discovery of more than […]

Security Sophos

‘AuKill’ EDR killer malware abuses Process Explorer driver

April 19, 2023 admin active adversary, active adversary playbook, anti-edr, aukill, backstab, EDR, edr killer, Featured, malware, process explorer, procexp, sophos x-ops, Targeted Attacks, threat research

Credit to Author: Andrew Brandt| Date: Wed, 19 Apr 2023 10:00:43 +0000

Driver based attacks against security products are on the rise

Security Sophos

Defenders vs. Adversaries: The Two-Speed Cybersecurity 2023 Race

April 4, 2023 admin active adversary, EDR, Endpoint, Featured, mdr, Network, products & services, security operations, XDR

Credit to Author: Sally Adam| Date: Tue, 04 Apr 2023 09:45:12 +0000

Slowed by multiple headwinds, defenders are falling behind while adversaries continue to accelerate. Organizations need to speed up the defender flywheel to enable them to pull ahead.

MalwareBytes Security