BypassGym tests whether AI agents can evade deployed EDR
DeepSeek-V4.1 Flash succeeded on 17 of 18 runs; Bitdefender blocked all but 5 of 15.
6 stories, newest first · one card per story
DeepSeek-V4.1 Flash succeeded on 17 of 18 runs; Bitdefender blocked all but 5 of 15.

Researcher details Windows console named-pipe injection that avoids VirtualAllocEx and WriteProcessMemory EDR checks.

An uncensored local Qwen derivative generated an LSASS dumper that evaded two EDRs in lab tests.

New Remus Windows infostealer removes syscall hooks to evade EDR, stealing browser credentials, crypto wallets, and AI tool data via ClickFix lures and EtherHiding C2.

A custom HVNC backdoor is targeting Latin American financial organizations via fake DocuSign and NFe tax-document lures, giving attackers hidden persistent remote access.
Huntress documented an Akira ransomware affiliate attack that failed after its anti-EDR tool crashed legitimate software and stopped encryption before completion.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views