Search: “kernel-mode”

84 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 971 Vulnerability 311 Ransomware 84 Exploit / PoC 68 Phishing & fraud 43 Threat actor 26 Advisory 22 Data breach 22 Policy & legal 7 Tools 2 AI research 1 Industry 1 AI safety & security 1

SeverityAll critical 236 high 1285 medium 32 low 2 info 4

XPAJ: Reversing a Windows x64 Bootkit

Kaspersky SecurelistJun 19, 18:16 UTC · Jun 19, 2012Ransomware

60

Hackers Exploit Windows Policy Loophole to Forge Kernel

The Hacker NewsJul 12, 03:37 UTC · Jul 12, 2023Ransomware

57

AmCache artifact: forensic value and a tool for data extraction

Kaspersky SecurelistOct 1, 10:00 UTC · Oct 1, 2025Ransomware

57

Exploring vulnerable Windows drivers

Cisco TalosDec 19, 11:04 UTC · Dec 19, 2024Ransomware CVE-2022-3699

60

AuKill tool uses BYOVD attack to disable EDR software

Security AffairsApr 24, 21:42 UTC · Apr 24, 2023Ransomware

57

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

The Hacker NewsApr 6, 10:07 UTC · Apr 6, 2026Ransomware

57

Qilin EDR killer infection chain

Cisco TalosApr 2, 10:00 UTC · Apr 2, 2026Ransomware

60

54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security

The Hacker NewsMar 20, 04:36 UTC · Mar 20, 2026Ransomware

57

Reynolds ransomware uses BYOVD to disable security before encryption

Security AffairsFeb 11, 15:00 UTC · Feb 11, 2026Ransomware CVE-2025-68947

60

Kaspersky ICS CERT predictions for the industrial threat landscape in 2025

Kaspersky SecurelistJan 29, 10:01 UTC · Jan 29, 2025Ransomware

60

Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations

The Hacker NewsJan 28, 13:08 UTC · Jan 28, 2025Ransomware

57

Microsoft Fixes 71 CVEs Including Actively Exploited Zero

Infosecurity MagazineDec 11, 10:15 UTC · Dec 11, 2024Ransomware in the wildCVE-2024-49138 CVE-2022-24521 CVE-2023-23376+3 CVEs1

60

Crimeware and financial predictions for 2025

Kaspersky SecurelistNov 14, 09:01 UTC · Nov 14, 2024Ransomware

60

Cyberthreats in the Middle East H1 2024

Kaspersky SecurelistOct 14, 07:00 UTC · Oct 14, 2024Ransomware

57

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

The Hacker NewsSep 11, 06:02 UTC · Sep 11, 2024Ransomware CVE-2017-0144 CVE-2020-1472 CVE-2021-42278+3 CVEs1

60

AI, election security headline discussions at Black Hat and DEF CON

Cisco TalosAug 15, 18:00 UTC · Aug 15, 2024Ransomware in the wildCVE-2024-38184 CVE-2024-38185 CVE-2024-38186+3 CVEs1

60

BlackByte Ransomware Abuses Vulnerable Windows Driver to Disable Security Solutions

The Hacker NewsMay 29, 04:43 UTC · May 29, 2024Ransomware CVE-2019-16098 CVE-2018-19320

60

2023 Kaspersky Incident Response report

Kaspersky SecurelistMay 14, 11:00 UTC · May 14, 2024Ransomware

57

Threat landscape for industrial automation systems. H2 2023

Kaspersky SecurelistMar 19, 15:27 UTC · Mar 19, 2024Ransomware

57

Kaspersky predictions about ICS and OT threats in 2024

Kaspersky SecurelistJan 31, 10:00 UTC · Jan 31, 2024Ransomware

60

Windows CLFS and five exploits used by ransomware operators (Exploit #3

Kaspersky SecurelistDec 21, 10:29 UTC · Dec 21, 2023Ransomware

57

Windows CLFS and five exploits used by ransomware operators

Kaspersky SecurelistDec 21, 09:53 UTC · Dec 21, 2023Ransomware CVE-2023-28252 CVE-2022-24521 CVE-2022-37969+1 CVEs

60

Crimeware and financial cyberthreat predictions for 2024

Kaspersky SecurelistNov 21, 10:00 UTC · Nov 21, 2023Ransomware

60

Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack

The Hacker NewsApr 28, 03:18 UTC · Apr 28, 2023Ransomware

57

Ransomware Attackers Use Microsoft

The Hacker NewsDec 18, 03:31 UTC · Dec 18, 2022Ransomware

57

Crimeware and financial cyberthreats in 2023

Kaspersky SecurelistNov 22, 08:00 UTC · Nov 22, 2022Ransomware

60

BlackByte Ransomware abuses driver to bypass security solutions

Security AffairsOct 8, 16:23 UTC · Oct 8, 2022Ransomware CVE-2018-19320 CVE-2019-16098

60

Threat landscape for industrial automation systems for H1 2022

Kaspersky SecurelistSep 8, 10:55 UTC · Sep 8, 2022Ransomware

57

Kaspersky GERT report on incident response in 2021

Kaspersky SecurelistSep 5, 10:00 UTC · Sep 5, 2022Ransomware

57

Friday Squid Blogging: 14-foot Giant Squid Washes Ashore in Cape Town

Schneier on SecurityAug 26, 21:08 UTC · Aug 26, 2022Ransomware

57

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

Kaspersky SecurelistJun 23, 10:00 UTC · Jun 23, 2022Ransomware

57

The Verizon 2022 DBIR

Kaspersky SecurelistMay 26, 06:20 UTC · May 26, 2022Ransomware

57

Delivering vulnerable signed kernel drivers remains popular among attackers

Help Net SecurityJan 13, 00:00 UTC · Jan 13, 2022Ransomware

60

The dangers of “connected” healthcare: predictions for 2022

Kaspersky SecurelistNov 23, 10:00 UTC · Nov 23, 2021Ransomware

57

Cyberthreats to financial organizations in 2022

Kaspersky SecurelistNov 23, 10:00 UTC · Nov 23, 2021Ransomware CVE-2019-5544 CVE-2020-3992 CVE-2018-13379+2 CVEs

60

Threats to ICS and industrial enterprises in 2022

Kaspersky SecurelistNov 23, 08:11 UTC · Nov 23, 2021Ransomware

60

Threat Source newsletter (Sept. 16, 2021)

Cisco TalosSep 16, 18:00 UTC · Sep 16, 2021Ransomware in the wildCVE-2021-40444 CVE-2021-36965 CVE-2021-26435

60

Incident response analyst report 2020

Kaspersky SecurelistSep 13, 11:00 UTC · Sep 13, 2021Ransomware

57

ICS threat report for H1 2021

Kaspersky SecurelistSep 9, 10:00 UTC · Sep 9, 2021Ransomware

57

REvil ransomware attack against MSPs and its clients around the world

Kaspersky SecurelistJul 6, 15:23 UTC · Jul 6, 2021Ransomware

57