[Stanley]

54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security

A new analysis of endpoint detection and response (EDR) killers has revealed that 54 of them leverage a technique known as bring your own vulnerable driver (BYOVD) by abusing a total of 35 vulnerable drivers.
EDR killer programs have been a common presence in ransomware intrusions as they offer a way for affiliates to neutralize security software before deploying file-encrypting malware. This

https://thehackernews.com/2026/03/54-edr...it-34.html

[DramaKing]

That's a lot of vulnerable drivers.

[Null State]

Developers need to fix the vulns in the drivers and this wouldn't happen near as often as it does lol. As well as end-users in some cases just never updating their shit, which is all to common for whatever reason.