The Windows Drivers Attackers Can Abuse
Threat actors increasingly target regular Windows drivers to bypass Endpoint Detection and Response systems. Attackers leverage pre-existing, signed drivers on the target system to gain necessary privileges. This approach allows malicious code to circumvent security protections more effectively than custom UEFI drivers. Exploiting UEFI vulnerabilities like the Pixie flaw via ICMP remains a less probable attack vector. Such exploits enable code execution in UEFI before the bootloader stage, but they are less favored by attackers.
Two AI bots for spam calls and data privacy
A user receiving 20 daily spam calls utilizes GrokBot to automatically register numbers on do-not-call lists, claiming the tool effectively removes them. Another bot, Privacy Scrubber, scans for leaked data held by brokers and requests removal.