Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot
Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot 2026-08-21 at 18:52 By Check Point Research has disclosed a technique that uses Microsoft Defender’s own legitimately signed boot-time remediation driver to perform arbitrary kernel-level file and registry operations on Windows systems ranging from Windows 7 through Windows 11 25H2, with no […]
Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot Read More »