kernel driver – Computer Security Articles

Credit to Author: Giusy Martin| Date: Tue, 24 Sep 2024 06:28:09 +0000

All’indomani di un incontro dei leader del settore presso Microsoft per discutere dell’ecosistema della sicurezza degli endpoint, alcune riflessioni

Security Sophos

L’aggiornamento di uno strumento di attacco compromette i computer Windows

October 1, 2024 admin blackcat, burntcigar, Cuba, EDR, edr killer, Featured, kernel driver, leaked certificate, lockbit, medusa, poortry, ransomhub, ransomware, signature, signed driver, stonestop, threat research

Credit to Author: Giusy Martin| Date: Tue, 10 Sep 2024 06:29:56 +0000

Un EDR killer che Sophos X-Ops ha monitorato per tre anni continua a tormentare le organizzazioni prese di mira dalle bande di ransomware

Security Sophos

Standing on the Windows platform, waiting for change

September 12, 2024 admin Endpoint Protection, Endpoint security, kernel driver, microsoft, products & services, threat research

Credit to Author: Angela Gunn| Date: Thu, 12 Sep 2024 17:01:24 +0000

In the wake of a gathering of industry leaders at Microsoft to discuss the endpoint-security ecosystem, some thoughts

Security Sophos

Attack tool update impairs Windows computers

August 27, 2024 admin blackcat, burntcigar, Cuba, edr killer, Featured, kernel driver, leaked certificate, lockbit, medusa, poortry, ransomhub, ransomware, signature, signed driver, stonestop, threat research

Credit to Author: Andrew Brandt| Date: Tue, 27 Aug 2024 16:33:35 +0000

An EDR killer Sophos X-Ops has tracked for three years continues to bedevil organizations targeted by ransomware gangs.

Microsoft Security

From alert to driver vulnerability: Microsoft Defender ATP investigation unearths privilege escalation flaw

April 8, 2019 admin Blue Hat, cybersecurity, DoublePulsar, Endpoint security, exploit, kernel driver, kernel sensors, kernel-mode attacks, Microsoft Defender ATP, privlege escalation, responsible vulnerability disclosure, Vulnerability, Windows Defender ATP

Credit to Author: Eric Avena| Date: Mon, 25 Mar 2019 15:00:07 +0000

Our discovery of two privilege escalation vulnerabilities in a driver highlights the strength of Microsoft Defender ATP’s sensors. These sensors expose anomalous behavior and give SecOps personnel the intelligence and tools to investigate threats, as we did.

The post From alert to driver vulnerability: Microsoft Defender ATP investigation unearths privilege escalation flaw appeared first on Microsoft Security .