Paper proposes shielding antivirus signatures from black-box extraction
On a ClamAV prototype, Robust Embedding Matching raised probing queries by up to 282.57 times with under 0.1% added false positives.
Stories per day · 30 days
1 RSS
10 stories, newest first · one card per story
Stories tagged #antivirus
Breaking the Black Box: Byte-Level Boundary Inference of Real-World Antivirus Systems
AVHunter infers byte-level decision boundaries of 11 antivirus products, exposing compact regions that enable evasion.
Weaponizing Ground Truth: Data Poisoning Attacks by Exploiting Boundary Misalignment Between Antivirus Software and Learning-Based Detectors
Bi-Iocane poisons ML malware detectors by flipping antivirus labels with tiny byte edits.
CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2
SafeTeam details full exploitation of CVE-2025-13032, a double-fetch bug in Avast's kernel driver, achieving kernel read/write and Windows 11 privilege escalation.
NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past
NightmareEclipse released BigDiskBuster, a PoC that blocks Microsoft Defender platform and signature updates by exhausting disk space.
1
Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts
Microsoft's Defender Antivirus update 4.18.26080.4 fixes false 'Defender Antivirus is turned off' alerts affecting all supported Windows client and server versions.
4
The 12 Best Antivirus Software for Mac, Compared and Priced
GBHackers ranks 12 Mac antivirus products, naming Bitdefender best overall and noting Gen Digital owns Norton, Avast, and Avira.
8
The 12 Best Antivirus (Endpoint Protection) Software for Business, Compared and Priced
GBHackers compares 12 business antivirus products on detection, EDR depth, pricing, and platform coverage, ranking CrowdStrike and Bitdefender joint top at 8.8.
13
ClamAV Vulnerabilities Affecting Cisco Products: August 2026
Cisco patched ClamAV vulnerabilities that allow remote attackers to cause denial-of-service conditions, rated High only for Windows-based platforms.
Cisco Warns of Seven ClamAV Flaws, Two With Public PoCs
Cisco warns of seven ClamAV denial-of-service flaws in Secure Endpoint Connector, two with public PoCs; patches due in August.