Search: “driver”

339 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 420 Ransomware 339 Exploit / PoC 316 Data breach 183 Threat actor 65 Malware 43 Advisory 15 Phishing & fraud 15 Policy & legal 8 AI safety & security 3 AI industry 2 Model release 1

SeverityAll critical 1212 high 186 medium 8 low 0 info 4

Exploring vulnerable Windows drivers

Cisco TalosDec 19, 11:04 UTC · Dec 19, 2024Ransomware CVE-2022-3699

60

Why a decade-old EnCase driver still works as an EDR killer

Help Net SecurityFeb 5, 00:00 UTC · Feb 5, 2026Ransomware

60

ThrottleStop driver abused to terminate AV processes

Kaspersky SecurelistAug 6, 10:00 UTC · Aug 6, 2025Ransomware CVE-2025-7771

60

Delivering vulnerable signed kernel drivers remains popular among attackers

Help Net SecurityJan 13, 00:00 UTC · Jan 13, 2022Ransomware

60

Analysis of Cuba ransomware gang activity and tooling

Kaspersky SecurelistSep 11, 10:00 UTC · Sep 11, 2023Ransomware CVE-2021-31207 CVE-2021-34473 CVE-2021-34523+8 CVEs

60

RobbinHood ransomware exploit GIGABYTE driver flaw to kill security software

Security AffairsFeb 8, 00:20 UTC · Feb 8, 2020Ransomware CVE-2018-19320

60

Stolen certificates in two waves of ransomware and wiper attacks

Kaspersky SecurelistDec 22, 17:01 UTC · Dec 22, 2022Ransomware

60

BlackByte Ransomware abuses driver to bypass security solutions

Security AffairsOct 8, 16:23 UTC · Oct 8, 2022Ransomware CVE-2018-19320 CVE-2019-16098

60

Ransomware uses vulnerable, signed driver to disable endpoint security

Help Net SecurityFeb 10, 00:00 UTC · Feb 10, 2020Ransomware CVE-2008-3431 CVE-2013-3956 CVE-2017-15302+1 CVEs

60

Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools

The Hacker NewsFeb 17, 05:50 UTC · Feb 17, 2026Ransomware CVE-2025-68947 CVE-2025-61155

60

Reynolds ransomware uses BYOVD to disable security before encryption

Security AffairsFeb 11, 15:00 UTC · Feb 11, 2026Ransomware CVE-2025-68947

60

Qilin EDR killer infection chain

Cisco TalosApr 2, 10:00 UTC · Apr 2, 2026Ransomware

60

GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack

The Hacker NewsMay 29, 05:25 UTC · May 29, 2024Ransomware CVE-2021-44228 CVE-2023-24860 CVE-2023-36010

60

New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack

The Hacker NewsJan 24, 08:57 UTC · Jan 24, 2026Ransomware CVE-2019-11580

60

New BYOVD loader behind DeadLock ransomware attack

Cisco TalosDec 9, 11:00 UTC · Dec 9, 2025Ransomware CVE-2024-51324

60

Ransomware gangs exploit a Paragon Partition Manager BioNTdrv.sys driver zero

Security AffairsMar 1, 18:52 UTC · Mar 1, 2025Ransomware in the wildCVE-2025-0289 CVE-2025-0288 CVE-2025-0287+2 CVEs

60

BlackByte Ransomware Abuses Vulnerable Windows Driver to Disable Security Solutions

The Hacker NewsMay 29, 04:43 UTC · May 29, 2024Ransomware CVE-2019-16098 CVE-2018-19320

60

Kaspersky ransomware report for 2024

Kaspersky SecurelistMay 7, 10:00 UTC · May 7, 2025Ransomware

60

Signed Microsoft Drivers Used in Attacks Against Businesses

Infosecurity MagazineDec 14, 18:00 UTC · Dec 14, 2022Ransomware

60

Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks

The Hacker NewsMar 3, 13:56 UTC · Mar 3, 2025Ransomware CVE-2025-0289 CVE-2025-0285 CVE-2025-0286+2 CVEs

60

Overview of ransomware trends in 2023

Kaspersky SecurelistMay 10, 19:56 UTC · May 10, 2023Ransomware CVE-2022-26522 CVE-2022-26523

60

Kaspersky crimeware report: ransomware propagation and driver abuse

Kaspersky SecurelistDec 5, 10:00 UTC · Dec 5, 2022Ransomware CVE-2022-26522 CVE-2022-26523

60

The Gentlemen RaaS: rapid growth and a new ransomware variant

Kaspersky SecurelistJun 30, 10:06 UTC · Jun 30, 2026Ransomware1

60

H1 2023: Ransomware's Pivot to Linux and Vulnerable Drivers

Recorded FutureJun 29, 00:00 UTC · Jun 29, 2026Ransomware

60

Do we still have to keep doing it like this?

Cisco TalosJan 9, 19:15 UTC · Jan 9, 2025Ransomware

60

Windows CLFS and five exploits used by ransomware operators

Kaspersky SecurelistDec 21, 09:53 UTC · Dec 21, 2023Ransomware CVE-2023-28252 CVE-2022-24521 CVE-2022-37969+1 CVEs

60

Chinese-speaking hackers exploited ESXi zero

Security AffairsJan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226 CVE-2025-22224 CVE-2025-22225

60

Linux variant of Qilin Ransomware targets Windows via remote management tools and BYOVD

Security AffairsOct 27, 10:45 UTC · Oct 27, 2025Ransomware

60

SonicWall Investigating Potential SSL VPN Zero

The Hacker NewsAug 7, 05:27 UTC · Aug 7, 2025Ransomware in the wild

60

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

The Hacker NewsSep 11, 06:02 UTC · Sep 11, 2024Ransomware CVE-2017-0144 CVE-2020-1472 CVE-2021-42278+3 CVEs1

60

BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave

The Hacker NewsAug 29, 15:41 UTC · Aug 29, 2024Ransomware CVE-2024-37085

60

CVE-2025-22225 in VMware ESXi now used in active ransomware attacks

Security AffairsFeb 4, 22:02 UTC · Feb 4, 2026Ransomware in the wildCVE-2025-22225 CVE-2025-22226 CVE-2025-22224

60

⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Ransomware CVE-2025-21590 CVE-2025-24983 CVE-2025-24984+27 CVEs1

60

BYOVD Attacks Exploit Zero

Infosecurity MagazineMar 3, 09:35 UTC · Mar 3, 2025Ransomware CVE-2025-0289 CVE-2025-0288 CVE-2025-0287+2 CVEs

60

BlackByte Ransomware group targets recently patched VMware ESXi flaw CVE-2024

Security AffairsAug 28, 14:39 UTC · Aug 28, 2024Ransomware CVE-2024-37085

60

Cybercriminals mask malicious communications through Microsoft Teams relays

Help Net SecurityJun 16, 00:00 UTC · Jun 16, 2026Ransomware CVE-2023-52271 CVE-2025-61155 CVE-2025-10551

60

Reviewing the trends in ransomware attacks in 2026

Kaspersky SecurelistMay 12, 07:00 UTC · May 12, 2026Ransomware

60

China-Linked Hackers Exploit VMware ESXi Zero

The Hacker NewsJan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224 CVE-2025-22225 CVE-2025-22226

60

⚡ Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & More

The Hacker NewsAug 12, 04:40 UTC · Aug 12, 2025Ransomware in the wildCVE-2025-54948 CVE-2025-54987 CVE-2025-8088+30 CVEs

60

Third Parties and Machine Credentials: The Silent Drivers Behind 2025's Worst Breaches

The Hacker NewsMay 6, 15:39 UTC · May 6, 2025Ransomware

60