FIN7

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenAug 21, 2026
Last mentionedAug 21, 2026

Timeline

1 articles · newest first

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot

Check Point revealed BTR Reforged, a technique weaponizing Microsoft Defender's built-in BTR.sys driver to delete security software at boot without exploiting any vulnerability.

The Hacker NewsAug 21, 15:52 UTC · Aug 21, 2026ToolsCVE-2021-240923 · 1 read

Related CVEs

by mentions

CVE-2021-24092<1%7.8
Microsoft Defender Elevation of Privilege Vulnerability
published Feb 25, 2021microsoft windows defender

Appears with

SentinelLabsvendor · 1
Microsoftvendor · 1
AvNeutralizermalware · 1
Windowsproduct · 1
Check Point Researchvendor · 1
BTR.sysproduct · 1
Microsoft Defenderproduct · 1

Entities are extracted by the model from each article. First seen Aug 21, 2026, last mentioned Aug 21, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.