Windows 11 adds a new secure mode that blocks sketchy apps and drivers

Windows 11 is adding Baseline Security Mode to block unsigned apps, services, and drivers by default, plus new consent ...
CSO Online

Attackers exploit decade‑old Windows driver flaw to shut down modern EDR defenses

Attackers abused a signed but long-revoked EnCase Windows kernel driver in a BYOVD attack to terminate all security tools.

EDR killer tool uses signed kernel driver from forensic software

Hackers are abusing a legitimate but long-revoked EnCase kernel driver in an EDR killer that can detect 59 security tools in ...
Threat Post

BYO-Bug Tactic Attacks Windows Kernel with Outdated Driver

The RobbinHood ransomware is using a deprecated Gigabyte driver as the tip of the spear for taking out antivirus products. The operators behind the RobbinHood ransomware are using a vulnerable, legacy ...
Digital Trends

Microsoft is now enforcing its rule banning unsigned Windows 10 kernel mode drivers

Microsoft announced last week that starting with Windows 10, version 1607, the operating system will refuse to load any new kernel mode drivers that are not signed by the Windows Hardware Developer ...
Threat Post

Patched Windows Kernel-Mode Driver Flaw Exploitable With One Bit Change

Details have been disclosed on a Windows kernel-mode driver privilege escalation vulnerability that was patched Tuesday by Microsoft. The vulnerabilities addressed in this month’s Patch Tuesday ...
Ars Technica

Microsoft announces plans to move graphics out of the Windows kernel… or not

A report by the website TechWorld has announced that Microsoft has plans to move the graphics display subsystem outside the Windows kernel into user mode. These changes would presumably take place in ...