Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support

Attackers reaching for kernel access on a Windows machine bring a driver Microsoft already trusts. It is signed, it loads, and it carries a known flaw. That flaw gives them enough room to tamper with memory or disable the security software watching the host. Once an attacker holds that level of access, the tools on the machine stop reliably protecting it. Ransomware crews run the technique as a step before they deploy a payload, a … More →


The post Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support appeared first on Help Net Security. Explore the content:


http://dlvr.it/TTqjC4

Comments

Popular Content

NASA Astronaut Comes Home After 3,856 Orbits of Earth

Scientists Built a Programmable Chip That Can Slow Light on Command

A Fiber Frozen at -196°C Unlocks a New Way To Store Light