Key takeaways Ransomware actors are leveraging vulnerable drivers to tamper with endpoint security products. Elastic Security released 65 YARA rules to detect vulnerable driver abuse. Elastic Endpoint (8.3+) protects users from this threat. Background In 2018, Gabriel Landau and Joe Desimone presented a talk at Black Hat covering the evolution of... Weiterlesen: Stopping Vulnerable Driver Attacks
Intelligence View
⚡ tsecurity.de Intelligence
Stopping Vulnerable Driver Attacks
Key takeaways Ransomware actors are leveraging vulnerable drivers to tamper with endpoint security products. Elastic Security released 65 YARA rules to detect…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
17 sources
CVE-2026-68445 | Linux Kernel up to 7.2-rc4 vc4 vc4_gem_object_mmap privileges management (Nessus ID 334892 / WID-SEC-2026-2799)
16 more sources
VVulDB Updates3 hours agoCVE-2026-68453 | Linux Kernel up to 6.18.43/7.1.7/7.2-rc5 zcrypt cca_cipher2protkey buffer overflow VVulDB Updates2 hours agoCVE-2026-72200 | Linux Kernel ntfs integer overflow (EUVD-2026-58958) VVulDB Updates2 hours agoCVE-2026-68471 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 Wifi Ieee80211 Mle ieee80211_mle_size_ok input validation (WID-SEC-2026-2852) VVulDB Updates2 hours agoCVE-2026-72203 | Linux Kernel up to 7.1.4 NTFS attrib.c ntfs_mft_writepages deadlock (EUVD-2026-58961) VVulDB Updates2 hours agoCVE-2026-72198 | Linux Kernel up to 7.1.4 ntfs dir.c ntfs_inode_sync_standard_information non_resident improper synchronization (EUVD-2026-58956) VVulDB Updates2 hours agoCVE-2026-72130 | Linux Kernel up to 6.12.100/6.18.39/7.1.4 nvmet-auth nvmet_execute_auth_receive out-of-bounds write (Nessus ID 342234)
+10
10 sources
CVE-2026-62902 | Microsoft .NET/Visual Studio improper authorization (EUVD-2026-56410 / WID-SEC-2026-2761)
9 more sources
VVulDB Updates3 hours agoCVE-2026-62899 | Microsoft .NET/Visual Studio improper authorization (Nessus ID 335252 / WID-SEC-2026-2761) VVulDB Updates3 hours agoCVE-2026-73608 | Siyuan Note SiYuan up to 3.7.3 getAttributeViewSearchTarget improper authorization VVulDB Updates3 hours agoCVE-2026-70354 | Microsoft .NET/Visual Studio out-of-bounds write (EUVD-2026-56770 / Nessus ID 341336) VVulDB Updates3 hours agoCVE-2026-62909 | Microsoft .NET/Visual Studio privileges management (EUVD-2026-56412 / Nessus ID 335447) VVulDB Updates3 hours agoCVE-2026-62901 | Microsoft .NET/Visual Studio infinite loop (EUVD-2026-56409 / Nessus ID 335447) VVulDB Updates7 hours agoCVE-2026-62897 | Microsoft .NET/.NET Framework/Visual Studio integer overflow (WID-SEC-2026-2761)
+3
10 sources
FBI: Nordkorea steckt hinter Milliarden-Kryptodiebstahl bei Binance
9 more sources
Hheise online News5 hours agoFBI: Nordkorea steckt hinter Milliarden-Kryptodiebstahl bei Binance GGoogle Alert5 hours agoBinance: Kryptobörse nimmt nach Milliarden-Raub Auszahlungen wieder auf GGoogle Alert3 hours agoBinance nach Rekord-Diebstahl: Hacker erbeuten 6,3 Milliarden Dollar – was jetzt passiert GGoogle Alert14 hours agoHacker erbeuteten 6,3 Milliarden Dollar von der Kryptowährungsbörse Binance: GGoogle Alert10 hours agoFBI vermutet nordkoreanische Hacker hinter Angriff auf "Binance" | BR24 GGoogle Alert9 hours agoFBI bestätigt: Nordkorea steckt hinter milliardenschwerem Krypto-Diebstahl bei Binance
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4299826/cyber-security-bulletins/stopping-vulnerable-driver-attacks/