New Windows Attack Hijacks Trusted Security Apps to Abuse Powerful Kernel Drivers

A new Windows attack technique called Bring Your Own Trusted Caller (BYOTC) shows how attackers can misuse trusted security applications to access powerful kernel drivers. The technique is related to Bring Your Own Vulnerable Driver (BYOVD), where attackers install a legitimate but flawed signed driver to gain kernel-level access. However, BYOTC...