Resultados

2 casos · pág. 1/1

sentinelone.com · há 1d medium

BYOVD trust gap: Windows kernel still loads revoked-certificate drivers; ~36% of LOLDrivers samples absent from default blocklist

SentinelOne analysis argues that bring your own vulnerable driver (BYOVD) succeeds because of a signing-trust gap rather than an incomplete driver list. The Windows kernel loads drivers signed with expired or revoked certificates, and a 2026 intrusion reported by Help Net Security used a decade-old forensic driver whose certificate had lo…

gbhackers.com · há 2h · 2 fontes · 2 atualizações critical

CISA advisory: SafePay ransomware has hit 600+ organizations and destroys backups via VSS shutdown and NAS factory resets

A joint advisory published on October 20, 2026 by CISA, the FBI, the United States Secret Service and German and UK law enforcement says SafePay ransomware actors have compromised at least 600 organizations across critical infrastructure sectors in North America, South America, Europe and Australia since August 2024. The findings cover in…

CVE-2020-3259 CVE-2023-20269 CVE-2023-27532 SafePay critical infrastructure government