EDR - Security Ticks

Ransomware Groups Increasingly Adopting EDR Killer Tools

EDR, EDR killer, Ransomware / SecurityTicks

Ransomware Groups Increasingly Adopting EDR Killer Tools 2025-03-27 at 14:47 By Ionut Arghire ESET uncovers a link between RansomHub, Play, Medusa, and BianLian ransomware gangs as more groups adopt tools to disable EDR software. The post Ransomware Groups Increasingly Adopting EDR Killer Tools appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

React to this headline:

Ransomware Groups Increasingly Adopting EDR Killer Tools Read More »

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel

CrowdStrike, EDR, Endpoint Security, Featured, kernel, Microsoft, Windows / SecurityTicks

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel 2024-09-13 at 21:45 By Ryan Naraine Microsoft is revamping how anti-malware tools interact with the Windows kernel to avoid another CrowdStrike faulty update catastrophe. The post Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Post-CrowdStrike Fallout: Microsoft Redesigning EDR Vendor Access to Windows Kernel Read More »

New Endpoint Protection Platform by Cigent Blocks Ransomware at the Data Level

EDR, Endpoint, Endpoint Security, Ransomware / SecurityTicks

New Endpoint Protection Platform by Cigent Blocks Ransomware at the Data Level 2024-05-29 at 15:16 By Kevin Townsend The two primary components to the solution are to encrypt company data at all times, and to decrypt only when the file is required for use. The post New Endpoint Protection Platform by Cigent Blocks Ransomware at

React to this headline:

New Endpoint Protection Platform by Cigent Blocks Ransomware at the Data Level Read More »

Research Shows How Attackers Can Abuse EDR Security Products

EDR, Endpoint, Endpoint Security, security product vulnerability, XDR / SecurityTicks

Research Shows How Attackers Can Abuse EDR Security Products 2024-04-22 at 17:46 By Ionut Arghire Vulnerabilities in Palo Alto Networks Cortex XDR allowed a security researcher to turn it into a malicious offensive tool. The post Research Shows How Attackers Can Abuse EDR Security Products appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Research Shows How Attackers Can Abuse EDR Security Products Read More »

Broadcom Merges Symantec and Carbon Black Into New Business Unit

Broadcom, Carbon Black, EDR, Endpoint Security, Funding/M&A, Symantec / SecurityTicks

Broadcom Merges Symantec and Carbon Black Into New Business Unit 2024-03-11 at 21:01 By SecurityWeek News Fresh off its $69 billion acquisition of VMware, Broadcom creates an Enterprise Security Group unit that merges Symantec and Carbon Black. The post Broadcom Merges Symantec and Carbon Black Into New Business Unit appeared first on SecurityWeek. This article

React to this headline:

Broadcom Merges Symantec and Carbon Black Into New Business Unit Read More »

New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions

EDR, Endpoint, Endpoint Security, process injection / SecurityTicks

New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions 07/12/2023 at 17:01 By Ionut Arghire Pool Party is a new set of eight Windows process injection techniques that evade endpoint detection and response solutions. The post New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions appeared first on SecurityWeek. This article is an

React to this headline:

New ‘Pool Party’ Process Injection Techniques Undetected by EDR Solutions Read More »