Topic: kernel driver security analysis

Elastic Denies Zero-Day RCE Flaw in Defend EDR

Elastic denies claims of a zero-day remote code execution vulnerability in its Defend platform, refuting a public disclosure by AshES Cybersecurity. AshES Cybersecurity alleged a NULL pointer dereference issue in Elastic's kernel driver, which could allow attackers to evade monitoring and execute...