#BYOVD
All CosmicBytez Labs articles tagged #BYOVD, across news, security advisories, how-to guides, and projects.
- News
Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt
SentinelOne splits EDR-killer attacks into four distinct behavior hunts — BYOVD, bring-your-own-installer, admin-to-kernel, and driverless suspension.
- News
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Ontinue details a four-stage Lunex Stealer chain abusing a vulnerable AMD driver to blind EDR, then steal browser and crypto-wallet data.
- News
'GodDamn' Ransomware Uses BYOVD Technique to Kill Security Software at US Companies
A new ransomware strain dubbed 'GodDamn' is leveraging a Microsoft-signed malicious kernel driver through the Bring Your Own Vulnerable Driver technique...
- Newsletter
May 26 Digest: SharePoint RCE, Megalodon CI/CD Blitz
Microsoft patches a CVSS 8.8 SharePoint RCE; the Megalodon campaign poisons 5,561 GitHub repos in six hours; 7-Eleven's ShinyHunters breach hits 185,000; and a.
- News
Making Vulnerable Drivers Exploitable Without Hardware: The
A new technical analysis reveals that many Windows kernel-mode drivers can be exploited from user mode without the physical hardware they were designed...
- News
Reynolds Ransomware Embeds BYOVD Driver to Disable EDR
A new ransomware strain called Reynolds bundles a Bring Your Own Vulnerable Driver component directly in its payload, killing EDR processes from...