Search: “driver”

769 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1418 Vulnerability 1166 Ransomware 769 Data breach 591 Exploit / PoC 366 Industry 341 Policy & legal 287 Phishing & fraud 243 Threat actor 189 Advisory 61 Research 56 AI tools & infra 45 AI safety & security 40 Tools 26

SeverityAll critical 1693 high 2604 medium 608 low 612 info 124

Exploring vulnerable Windows drivers

Cisco TalosDec 19, 11:04 UTC · Dec 19, 2024Ransomware CVE-2022-3699

60

Making Vulnerable Drivers Exploitable Without Hardware

The Hacker NewsMay 22, 11:38 UTC · May 22, 2026Ransomware

57

Hackers Exploit Windows Policy Loophole to Forge Kernel

The Hacker NewsJul 12, 03:37 UTC · Jul 12, 2023Ransomware

57

Why a decade-old EnCase driver still works as an EDR killer

Help Net SecurityFeb 5, 00:00 UTC · Feb 5, 2026Ransomware

60

ThrottleStop driver abused to terminate AV processes

Kaspersky SecurelistAug 6, 10:00 UTC · Aug 6, 2025Ransomware CVE-2025-7771

60

Delivering vulnerable signed kernel drivers remains popular among attackers

Help Net SecurityJan 13, 00:00 UTC · Jan 13, 2022Ransomware

60

AmCache artifact: forensic value and a tool for data extraction

Kaspersky SecurelistOct 1, 10:00 UTC · Oct 1, 2025Ransomware

57

Analysis of Cuba ransomware gang activity and tooling

Kaspersky SecurelistSep 11, 10:00 UTC · Sep 11, 2023Ransomware CVE-2021-31207 CVE-2021-34473 CVE-2021-34523+8 CVEs

60

RobbinHood ransomware exploit GIGABYTE driver flaw to kill security software

Security AffairsFeb 8, 00:20 UTC · Feb 8, 2020Ransomware CVE-2018-19320

60

BlackCat Ransomware affiliate uses signed kernel driver to evade detection

Security AffairsMay 23, 06:51 UTC · May 23, 2023Ransomware

57

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support

Help Net SecurityAug 3, 00:00 UTC · Aug 3, 2026Ransomware

57

AuKill tool uses BYOVD attack to disable EDR software

Security AffairsApr 24, 21:42 UTC · Apr 24, 2023Ransomware

57

Stolen certificates in two waves of ransomware and wiper attacks

Kaspersky SecurelistDec 22, 17:01 UTC · Dec 22, 2022Ransomware

60

Ransomware Attackers Use Microsoft

The Hacker NewsDec 18, 03:31 UTC · Dec 18, 2022Ransomware

57

BlackByte Ransomware abuses driver to bypass security solutions

Security AffairsOct 8, 16:23 UTC · Oct 8, 2022Ransomware CVE-2018-19320 CVE-2019-16098

60

Microsoft launches center for reporting malicious drivers

The RecordJan 18, 00:00 UTC · Jan 18, 2023Ransomware

57

Ransomware uses vulnerable, signed driver to disable endpoint security

Help Net SecurityFeb 10, 00:00 UTC · Feb 10, 2020Ransomware CVE-2008-3431 CVE-2013-3956 CVE-2017-15302+1 CVEs

60

GodDamn Ransomware Uses PoisonX to Blind Security Software

Security AffairsJul 9, 18:11 UTC · Jul 9, 2026Ransomware

57

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

The Hacker NewsApr 6, 10:07 UTC · Apr 6, 2026Ransomware

57

Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools

The Hacker NewsFeb 17, 05:50 UTC · Feb 17, 2026Ransomware CVE-2025-68947 CVE-2025-61155

60

Reynolds ransomware uses BYOVD to disable security before encryption

Security AffairsFeb 11, 15:00 UTC · Feb 11, 2026Ransomware CVE-2025-68947

60

New York fines Geico, Travelers $11 million for exposed driver’s license numbers

The RecordNov 25, 21:28 UTC · Nov 25, 2024Ransomware

57

Qilin EDR killer infection chain

Cisco TalosApr 2, 10:00 UTC · Apr 2, 2026Ransomware

60

Medusa Ransomware Uses Malicious Driver to Disable Anti

The Hacker NewsMar 22, 04:07 UTC · Mar 22, 2025Ransomware

57

GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack

The Hacker NewsMay 29, 05:25 UTC · May 29, 2024Ransomware CVE-2021-44228 CVE-2023-24860 CVE-2023-36010

60

Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools

Security AffairsMar 24, 14:56 UTC · Mar 24, 2025Ransomware

57

Novel News on Cuba Ransomware: Greetings From Tropical Scorpius

Palo Alto Unit 42Jun 5, 20:16 UTC · Jun 5, 2024Ransomware

57

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

The Hacker NewsJul 10, 07:50 UTC · Jul 10, 2026Ransomware

57

New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack

The Hacker NewsJan 24, 08:57 UTC · Jan 24, 2026Ransomware CVE-2019-11580

60

New BYOVD loader behind DeadLock ransomware attack

Cisco TalosDec 9, 11:00 UTC · Dec 9, 2025Ransomware CVE-2024-51324

60

Ransomware gangs exploit a Paragon Partition Manager BioNTdrv.sys driver zero

Security AffairsMar 1, 18:52 UTC · Mar 1, 2025Ransomware in the wildCVE-2025-0289 CVE-2025-0288 CVE-2025-0287+2 CVEs

60

BlackByte Ransomware Abuses Vulnerable Windows Driver to Disable Security Solutions

The Hacker NewsMay 29, 04:43 UTC · May 29, 2024Ransomware CVE-2019-16098 CVE-2018-19320

60

Kaspersky ransomware report for 2024

Kaspersky SecurelistMay 7, 10:00 UTC · May 7, 2025Ransomware

60

Abusing Windows Container Isolation Framework to avoid detection by security products

Security AffairsAug 31, 07:43 UTC · Aug 31, 2023Ransomware

57

54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security

The Hacker NewsMar 20, 04:36 UTC · Mar 20, 2026Ransomware

57

Signed Microsoft Drivers Used in Attacks Against Businesses

Infosecurity MagazineDec 14, 18:00 UTC · Dec 14, 2022Ransomware

60

Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks

The Hacker NewsMar 3, 13:56 UTC · Mar 3, 2025Ransomware CVE-2025-0289 CVE-2025-0285 CVE-2025-0286+2 CVEs

60

Overview of ransomware trends in 2023

Kaspersky SecurelistMay 10, 19:56 UTC · May 10, 2023Ransomware CVE-2022-26522 CVE-2022-26523

60

Kaspersky crimeware report: ransomware propagation and driver abuse

Kaspersky SecurelistDec 5, 10:00 UTC · Dec 5, 2022Ransomware CVE-2022-26522 CVE-2022-26523

60

New Ransomware Exploits Malicious Driver to Remove Security Protection

Infosecurity MagazineJul 10, 13:00 UTC · Jul 10, 2026Ransomware

57