Tag
#EDR evasion
4 stories taggedEDR evasion.
Vulnerabilities
Non-Admin macOS Accounts Can Chain Native OS Features to Blind Endpoint Security Tools
No exploit required. Researchers found that standard user privileges are enough to chain macOS weaknesses and silently kill endpoint security agents without touching a vulnerability.
3 min read
Threat Intelligence
Weekly Threat Roundup: EDR Killers, Browser Bugs, and an Android Trojan With Too Many Hands
Abused integrations, poisoned WordPress, and ransomware crews still gunning for endpoint sensors, familiar tradecraft, better packaged.
3 min read
Ransomware
The Gentlemen RaaS Ships an In-House EDR Killer to Affiliates
GentleKiller bundles signed-driver abuse with third-party utilities and a kill list of roughly 400 security processes, handed out as part of the affiliate package.
3 min read
Vulnerabilities
When the Hardware Isn't There: Coaxing Vulnerable Drivers Into Range
BYOVD research keeps colliding with a stubborn problem, many kernel drivers refuse to talk unless their device is plugged in. New work shows how to make them talk anyway.
3 min read