Topic: kernel-level access
-
Forensic Tool's Signed Driver Exploited as EDR Killer
Hackers exploited a revoked but still functional kernel driver from the EnCase forensic tool to disable endpoint security software, highlighting the threat of Bring Your Own Vulnerable Driver (BYOVD) attacks. The attackers initially breached the network via a SonicWall VPN lacking multi-factor au...
Read More » -
Battlefield 6 Dev Apologizes for Secure Boot Anti-Cheat Requirement
The Battlefield 6 open beta required Secure Boot activation, causing debate and technical issues among PC gamers over kernel-level access for anti-cheat. EA's technical director defended the policy as necessary for fair play, acknowledging player frustrations but emphasizing its effectiveness aga...
Read More » -
Battlefield Dev on Secure Boot Requirement: Anti-Cheat Battle "Never Ends"
The Battlefield 6 open beta required Secure Boot and kernel-level access for its Javalin anti-cheat system, which blocked some PC players due to hardware limitations. EA prioritized anti-cheat with significant investment, including two dedicated teams for development and enforcement, aiming to ma...
Read More » -
8 Ransomware Groups Now Using This EDR-Bypassing Tool
A new advanced tool is being used by multiple ransomware groups to bypass endpoint security by exploiting vulnerable drivers and disabling critical defenses before launching attacks. The tool employs heavy obfuscation and BYOVD attacks to target security products from major vendors, allowing rans...
Read More »