Search: “byovd”

77 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 98 Malware 33 Vulnerability 18 Threat actor 16 Exploit / PoC 8 Phishing & fraud 2 AI safety & security 2 Advisory 2 Tools 1 Data breach 1

SeverityAll critical 77 high 83 medium 19 low 1 info 1

Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools

The Hacker NewsFeb 17, 05:50 UTC · Feb 17, 2026Ransomware CVE-2025-68947 CVE-2025-61155

60

Reynolds ransomware uses BYOVD to disable security before encryption

Security AffairsFeb 11, 15:00 UTC · Feb 11, 2026Ransomware CVE-2025-68947

60

Wormable XMRig campaign leverages BYOVD and timed kill switch for stealth

Security AffairsFeb 23, 18:36 UTC · Feb 23, 2026Threat actor

60

BYOVD Attacks Exploit Zero

Infosecurity MagazineMar 3, 09:35 UTC · Mar 3, 2025Ransomware CVE-2025-0289 CVE-2025-0288 CVE-2025-0287+2 CVEs

60

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

The Hacker NewsJul 3, 14:36 UTC · Jul 3, 2026Ransomware CVE-2025-5777

60

Linux variant of Qilin Ransomware targets Windows via remote management tools and BYOVD

Security AffairsOct 27, 10:45 UTC · Oct 27, 2025Ransomware

60

New BYOVD loader behind DeadLock ransomware attack

Cisco TalosDec 9, 11:00 UTC · Dec 9, 2025Ransomware CVE-2024-51324

60

DeadLock Ransomware Uses BYOVD to Evade Security Measures

Infosecurity MagazineDec 9, 16:00 UTC · Dec 9, 2025Ransomware CVE-2024-51324

60

Wormable XMRig Campaign Uses BYOVD Exploit and Time

The Hacker NewsFeb 24, 11:56 UTC · Feb 24, 2026Threat actor CVE-2020-14979 CVE-2025-55182

60

ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories

The Hacker NewsFeb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild1

60

ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More

The Hacker NewsOct 3, 04:59 UTC · Oct 3, 2025Malware CVE-2024-3400 CVE-2017-7921

60

⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More

The Hacker NewsMay 7, 10:33 UTC · May 7, 2025Malware CVE-2025-29927 CVE-2025-23120 CVE-2024-56346+13 CVEs

60

Kaspersky ransomware report for 2024

Kaspersky SecurelistMay 7, 10:00 UTC · May 7, 2025Ransomware

60

Analyzing the vulnerability landscape in Q2 2024

Kaspersky SecurelistAug 21, 07:41 UTC · Aug 21, 2024Vulnerability CVE-2018-0802 CVE-2017-11882 CVE-2017-0199+6 CVEs

60

BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks

Cisco TalosAug 28, 10:00 UTC · Aug 28, 2024Vulnerability CVE-2024-37085

60

Microsoft Zero-Day CVE-2024-38193 was exploited by North Korea

Security AffairsAug 19, 08:41 UTC · Aug 19, 2024Exploit / PoC in the wildCVE-2024-38193 CVE-2024-21338

60

GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack

The Hacker NewsMay 29, 05:25 UTC · May 29, 2024Ransomware CVE-2021-44228 CVE-2023-24860 CVE-2023-36010

60

Hackers exploited Windows 0-day for 6 months after Microsoft knew of it

Ars Technica · SecurityMar 4, 22:47 UTC · Mar 4, 2024Exploit / PoC in the wildCVE-2024-21338

60

Lazarus APT exploited 0-day in Win driver to gain kernel privileges

Security AffairsFeb 29, 08:11 UTC · Feb 29, 2024Threat actor CVE-2024-21338

60

Cybercriminals Exploit CheckPoint Driver Flaws in Malicious Campaign

Infosecurity MagazineMar 21, 12:45 UTC · Mar 21, 2025Threat actor

60

Advanced threat predictions for 2025

Kaspersky SecurelistNov 25, 10:02 UTC · Nov 25, 2024Exploit / PoC CVE-2024-23222 CVE-2024-23225 CVE-2024-23296+3 CVEs

60

Why a decade-old EnCase driver still works as an EDR killer

Help Net SecurityFeb 5, 00:00 UTC · Feb 5, 2026Ransomware

60

⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Ransomware CVE-2025-21590 CVE-2025-24983 CVE-2025-24984+27 CVEs1

60

Do we still have to keep doing it like this?

Cisco TalosJan 9, 19:15 UTC · Jan 9, 2025Ransomware

60

Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity

The Hacker NewsMar 11, 06:29 UTC · Mar 11, 2023Exploit / PoC

60

Delivering vulnerable signed kernel drivers remains popular among attackers

Help Net SecurityJan 13, 00:00 UTC · Jan 13, 2022Ransomware

60

Reviewing the trends in ransomware attacks in 2026

Kaspersky SecurelistMay 12, 07:00 UTC · May 12, 2026Ransomware

60

SonicWall Investigating Potential SSL VPN Zero

The Hacker NewsAug 7, 05:27 UTC · Aug 7, 2025Ransomware in the wild

60

RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed Control

The Hacker NewsMay 1, 10:52 UTC · May 1, 2025Ransomware

60

RansomHub ransomware gang relies on TDSKiller to disable EDR

Security AffairsSep 11, 13:15 UTC · Sep 11, 2024Ransomware

60

BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave

The Hacker NewsAug 29, 15:41 UTC · Aug 29, 2024Ransomware CVE-2024-37085

60

TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

The Hacker NewsMar 21, 03:22 UTC · Mar 21, 2024Ransomware CVE-2024-27198

60

Lazarus Hackers Exploited Windows Kernel Flaw as Zero

The Hacker NewsFeb 29, 14:41 UTC · Feb 29, 2024Threat actor in the wildCVE-2024-21338

60

North Korea-linked Lazarus APT used a 0

Security AffairsMar 8, 15:51 UTC · Mar 8, 2023Threat actor

60

Ransomware

Cisco TalosOct 26, 00:00 UTC · Oct 26, 2017Ransomware

60

The Gentlemen RaaS: rapid growth and a new ransomware variant

Kaspersky SecurelistJun 30, 10:06 UTC · Jun 30, 2026Ransomware1

60

Beyond the Code: Unearthing the Subtle Business Ramifications of Six Months in Vulnerabilities

Recorded FutureJun 23, 00:00 UTC · Jun 23, 2026Vulnerability CVE-2022-41082 CVE-2023-0669 CVE-2023-2868

60

ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More

The Hacker NewsMar 19, 14:25 UTC · Mar 19, 2026Ransomware in the wildCVE-2024-55591 CVE-2025-71257 CVE-2025-71258+4 CVEs

60

ThreatsDay Bulletin: OAuth Trap, EDR Killer, Signal Phishing, Zombie ZIP, AI Platform Hack & More

The Hacker NewsMar 12, 15:00 UTC · Mar 12, 2026Phishing & fraud in the wild

60

⚡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & More

The Hacker NewsFeb 26, 11:25 UTC · Feb 26, 2026Malware CVE-2026-22769 CVE-2026-25926 CVE-2026-26119+32 CVEs

60