Search: “driver”

463 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1418 Vulnerability 1166 Ransomware 769 Data breach 591 Exploit / PoC 366 Industry 341 Policy & legal 287 Phishing & fraud 243 Threat actor 189 Advisory 61 Research 56 AI tools & infra 45 AI safety & security 40 Tools 26

SeverityAll critical 1693 high 2604 medium 608 low 612 info 125

Exploring vulnerable Windows drivers

Cisco TalosDec 19, 11:04 UTC · Dec 19, 2024Ransomware CVE-2022-3699

60

Making Vulnerable Drivers Exploitable Without Hardware

The Hacker NewsMay 22, 11:38 UTC · May 22, 2026Ransomware

57

Hackers Exploit Windows Policy Loophole to Forge Kernel

The Hacker NewsJul 12, 03:37 UTC · Jul 12, 2023Ransomware

57

ThrottleStop driver abused to terminate AV processes

Kaspersky SecurelistAug 6, 10:00 UTC · Aug 6, 2025Ransomware CVE-2025-7771

60

AmCache artifact: forensic value and a tool for data extraction

Kaspersky SecurelistOct 1, 10:00 UTC · Oct 1, 2025Ransomware

57

Analysis of Cuba ransomware gang activity and tooling

Kaspersky SecurelistSep 11, 10:00 UTC · Sep 11, 2023Ransomware CVE-2021-31207 CVE-2021-34473 CVE-2021-34523+8 CVEs

60

RobbinHood ransomware exploit GIGABYTE driver flaw to kill security software

Security AffairsFeb 8, 00:20 UTC · Feb 8, 2020Ransomware CVE-2018-19320

60

BlackCat Ransomware affiliate uses signed kernel driver to evade detection

Security AffairsMay 23, 06:51 UTC · May 23, 2023Ransomware

57

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support

Help Net SecurityAug 3, 00:00 UTC · Aug 3, 2026Ransomware

57

AuKill tool uses BYOVD attack to disable EDR software

Security AffairsApr 24, 21:42 UTC · Apr 24, 2023Ransomware

57

Ransomware Attackers Use Microsoft

The Hacker NewsDec 18, 03:31 UTC · Dec 18, 2022Ransomware

57

BlackByte Ransomware abuses driver to bypass security solutions

Security AffairsOct 8, 16:23 UTC · Oct 8, 2022Ransomware CVE-2018-19320 CVE-2019-16098

60

Microsoft launches center for reporting malicious drivers

The RecordJan 18, 00:00 UTC · Jan 18, 2023Ransomware

57

Ransomware uses vulnerable, signed driver to disable endpoint security

Help Net SecurityFeb 10, 00:00 UTC · Feb 10, 2020Ransomware CVE-2008-3431 CVE-2013-3956 CVE-2017-15302+1 CVEs

60

GodDamn Ransomware Uses PoisonX to Blind Security Software

Security AffairsJul 9, 18:11 UTC · Jul 9, 2026Ransomware

57

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

The Hacker NewsApr 6, 10:07 UTC · Apr 6, 2026Ransomware

57

New York fines Geico, Travelers $11 million for exposed driver’s license numbers

The RecordNov 25, 21:28 UTC · Nov 25, 2024Ransomware

57

Medusa Ransomware Uses Malicious Driver to Disable Anti

The Hacker NewsMar 22, 04:07 UTC · Mar 22, 2025Ransomware

57

Medusa ransomware uses malicious Windows driver ABYSSWORKER to disable security tools

Security AffairsMar 24, 14:56 UTC · Mar 24, 2025Ransomware

57

Novel News on Cuba Ransomware: Greetings From Tropical Scorpius

Palo Alto Unit 42Jun 5, 20:16 UTC · Jun 5, 2024Ransomware

57

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

The Hacker NewsJul 10, 07:50 UTC · Jul 10, 2026Ransomware

57

New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack

The Hacker NewsJan 24, 08:57 UTC · Jan 24, 2026Ransomware CVE-2019-11580

60

BlackByte Ransomware Abuses Vulnerable Windows Driver to Disable Security Solutions

The Hacker NewsMay 29, 04:43 UTC · May 29, 2024Ransomware CVE-2019-16098 CVE-2018-19320

60

Abusing Windows Container Isolation Framework to avoid detection by security products

Security AffairsAug 31, 07:43 UTC · Aug 31, 2023Ransomware

57

54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security

The Hacker NewsMar 20, 04:36 UTC · Mar 20, 2026Ransomware

57

Kaspersky crimeware report: ransomware propagation and driver abuse

Kaspersky SecurelistDec 5, 10:00 UTC · Dec 5, 2022Ransomware CVE-2022-26522 CVE-2022-26523

60

New Ransomware Exploits Malicious Driver to Remove Security Protection

Infosecurity MagazineJul 10, 13:00 UTC · Jul 10, 2026Ransomware

57

EDR killers are now standard equipment in ransomware attacks

Help Net SecurityApr 23, 13:28 UTC · Apr 23, 2026Ransomware

57

Threat Roundup for October 2 to October 9

Cisco TalosOct 9, 19:36 UTC · Oct 9, 2020Ransomware

57

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes

The Hacker NewsJun 23, 17:43 UTC · Jun 23, 2026Ransomware

57

Inside GentleKiller: The EDR

Security AffairsJun 22, 09:39 UTC · Jun 22, 2026Ransomware

57

Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack

The Hacker NewsApr 28, 03:18 UTC · Apr 28, 2023Ransomware

57

Ransomware Attackers Abuse Genshin Impact Anti

The Hacker NewsSep 5, 12:26 UTC · Sep 5, 2022Ransomware

57

Insurer unveils policy covering drivers from connected car hacks and data leaks

The RecordMar 27, 15:25 UTC · Mar 27, 2024Ransomware

57

DragonForce Hid Inside Microsoft Teams and Nobody Noticed for Two Months

Security AffairsJun 17, 15:55 UTC · Jun 17, 2026Ransomware

57

FIN7 group advertises new EDR bypass tool on hacking forums

Security AffairsJul 18, 11:04 UTC · Jul 18, 2024Ransomware

57

Friday Squid Blogging: 14-foot Giant Squid Washes Ashore in Cape Town

Schneier on SecurityAug 26, 21:08 UTC · Aug 26, 2022Ransomware

57

GentleKiller Framework Disables Victims' Security Software

Infosecurity MagazineJun 22, 15:00 UTC · Jun 22, 2026Ransomware

57

A group linked to RansomHub operation employs EDR

Security AffairsAug 15, 20:12 UTC · Aug 15, 2024Ransomware

57

Threat Roundup for March 17 to March 24

Cisco TalosMar 24, 17:42 UTC · Mar 24, 2023Ransomware

57