+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: 54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security (/showthread.php?tid=6322848)
54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security - Stanley - Mar 28, 2026
54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security
A new analysis of endpoint detection and response (EDR) killers has revealed that 54 of them leverage a technique known as bring your own vulnerable driver (BYOVD) by abusing a total of 35 vulnerable drivers.
EDR killer programs have been a common presence in ransomware intrusions as they offer a way for affiliates to neutralize security software before deploying file-encrypting malware. This
https://thehackernews.com/2026/03/54-edr-killers-use-byovd-to-exploit-34.html
RE: 54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security - DramaKing - Mar 28, 2026
That's a lot of vulnerable drivers.
RE: 54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security - Null State - Mar 29, 2026
Developers need to fix the vulns in the drivers and this wouldn't happen near as often as it does lol. As well as end-users in some cases just never updating their shit, which is all to common for whatever reason.