54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security

March 19, 2026
No Comments

54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security

A new analysis of endpoint detection and response (EDR) killers has revealed that 54 of them leverage a technique known as bring your own vulnerable driver (BYOVD) by abusing a total of 34 vulnerable drivers.
EDR killer programs have been a common presence in ransomware intrusions as they offer a way for affiliates to neutralize security software before deploying file-encrypting malware. This

Leave a Reply Cancel reply

Cloud Security Controls Explained: A Definitive Guide March 19, 2026
Most teams already have cloud security tools in place. That’s not the issue. The problem is that those tools don’t give you any real control. Infrastructure is built fast, modified constantly, and touched by too many people to track. Code moves through CI pipelines and ends up in production before anyone from security even knows […]
Tyler Carrigan
New Ubuntu Snap Bug Opens Door to Delayed Root Compromise March 19, 2026
A newly disclosed flaw in Ubuntu’s Snap ecosystem is raising fresh concerns about local privilege escalation risks in default Linux environments. Researchers at Qualys have identified CVE-2026-3888, a high-severity vulnerability that allows a low-privileged local user to escalate access to full root control on affected systems. The problem affects default installs of Ubuntu Desktop versions 24.04 and […]
Kirsten Doyle
Delegated Trust Is Becoming the Largest Attack Surface in Modern Security March 18, 2026
Over the next decade, the way we define security failures is going to change. No longer will it begin with an unpatched server or a careless employee clicking the wrong link. The root cause will be something far more ordinary, yet harder to see: third-party services. Right now, organizations are allowing outside services to sit […]
Clarence Chio
UK’s Companies House exposed data linked to millions of firms March 18, 2026
Companies House, the UK’s official registrar of companies, has disclosed a security flaw in its WebFiling service that exposed sensitive data tied to more than five million registered businesses. The issue traces back to a system update rolled out in October 2025 and went unnoticed for five months before it was flagged. The vulnerability meant logged-in users could access other companies’ records simply […]
Kirsten Doyle
Cyberattacks Soar 245% as War Triggers Global Digital Offensive March 18, 2026
Since the outbreak of the Middle East conflict on 28 February 2026, Akamai has seen a surge of 245% in cyberattacks against key businesses and institutions in North America, Europe, and some Asian Pacific countries. One group in particular, Handala (widely believed to have ties to Iranian intelligence) has claimed responsibility for a destructive data-wiping attack on Stryker, the global […]
Kirsten Doyle
‘CrackArmor’ Exposes Nine Vulnerabilities in Linux AppArmor March 18, 2026
The Qualys Threat Research Unit (TRU) has identified nine vulnerabilities in AppArmor, a Linux Security Module. The vulnerability has been present since 2017 (version v4.11). AppArmor is the default mandatory access control system for Ubuntu, Debian, SUSE, and several cloud platforms. Its presence in all these systems and its use in all these platforms make the threat landscape much wider. […]
Kirsten Doyle
ShinyHunters Claims It Stole 1PB of Data from TELUS Digital March 17, 2026
TELUS Digital has fallen victim to a security incident in which unsanctioned actors accessed its systems. Upon learning of this incident, the company said it took immediate action to resolve it and prevent any future breaches of its systems and environment. “All business operations within TELUS Digital remain fully operational, and there is no evidence of […]
Kirsten Doyle
Why OSINT deserves the same status as other intelligence disciplines March 17, 2026
Open source intelligence (OSINT) still sits outside the intelligence mainstream. If you’re not acquainted with the intelligence profession, you might not have come across the term at all. OSINT is the targeted collection and analysis of publicly available or licensable data to generate actionable intelligence. The discipline is a critical tool for combating crime and […]
Chris P.
A Latte Trouble: Starbucks HR Accounts Hit in Credential Theft Incident March 16, 2026
Starbucks has disclosed a data breach attackers gained access to hundreds of employees’ Starbucks Partner Central accounts, which are used for managing employment information, personal data, benefits, and HR information. In a letter sent to affected staff members, the company said: “On or about February 6, 2026, Starbucks Corporation (“Starbucks” or “we”) became aware of potential unauthorized access […]
Kirsten Doyle
The AI Doomsday Clock: When AI Becomes a Business Dependency, Not a Tool March 16, 2026
Most conversations about AI in business start with the wrong question of “Can AI do the job?” It is entirely the wrong place to start. The real question for leadership is quieter but vastly more important…“Will this platform still exist, function, and be supportable when the AI bubble shifts?” Right now, many organizations are not […]
Gene Moody

54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security

ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More

Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers

Leave a Reply Cancel reply

[email protected]

54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security

54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security

Share :

Leave a Reply Cancel reply