#edrbypass — Public Fediverse posts

Check Point details BTR.sys driver abuse: a signed Defender component turned into a kernel EDR/AV bypass with no exploit needed.

#BTRsys #EDRBypass #Windows #Defender #KernelSecurity #LOLDriver #CheckPoint #InfoSec

http://securityonline.info/btr-sys-driver-edr-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Check Point details BTR.sys driver abuse: a signed Defender component turned into a kernel EDR/AV bypass with no exploit needed.

#BTRsys #EDRBypass #Windows #Defender #KernelSecurity #LOLDriver #CheckPoint #InfoSec

http://securityonline.info/btr-sys-driver-edr-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Check Point details BTR.sys driver abuse: a signed Defender component turned into a kernel EDR/AV bypass with no exploit needed.

#BTRsys #EDRBypass #Windows #Defender #KernelSecurity #LOLDriver #CheckPoint #InfoSec

http://securityonline.info/btr-sys-driver-edr-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Check Point details BTR.sys driver abuse: a signed Defender component turned into a kernel EDR/AV bypass with no exploit needed.

#BTRsys #EDRBypass #Windows #Defender #KernelSecurity #LOLDriver #CheckPoint #InfoSec

http://securityonline.info/btr-sys-driver-edr-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Check Point details BTR.sys driver abuse: a signed Defender component turned into a kernel EDR/AV bypass with no exploit needed.

#BTRsys #EDRBypass #Windows #Defender #KernelSecurity #LOLDriver #CheckPoint #InfoSec

http://securityonline.info/btr-sys-driver-edr-bypass/?utm_source=mastodon&utm_medium=jetpack_social

Reward: You've received a Tarnished Naturalist's Field Guide — it cannot protect you, but it does document your demise beautifully.

#CyberSecurity #APT #Malware #EDRBypass #Linux #AchievementUnlocked (3/3)

Reward: You've received a Tarnished Naturalist's Field Guide — it cannot protect you, but it does document your demise beautifully.

#CyberSecurity #APT #Malware #EDRBypass #Linux #AchievementUnlocked (3/3)

Reward: You've received a Tarnished Naturalist's Field Guide — it cannot protect you, but it does document your demise beautifully.

#CyberSecurity #APT #Malware #EDRBypass #Linux #AchievementUnlocked (3/3)

UAT-10147, a Chinese-speaking group profiled by Cisco Talos, uses SPECTRE — a modular backdoor that kills EDR agents on compromised Windows and Linux servers. By disabling endpoint defenses before deploying further payloads, the operator maintains persistent stealth across education, media, tech, and gaming sectors. #UAT10147 #SPECTREBackdoor #EDRBypass

https://cyberworldops.eu/en/spectre-the-backdoor-that-disables-edrs-inside-uat-10147-s-arsenal

UAT-10147 Deploys AI-Powered SPECTRE Backdoor with EDR Bypass

Meet UAT-10147, a Chinese-speaking cybercrime group that's taking AI-powered attacks to the next level with its sophisticated SPECTRE backdoor, capable of bypassing EDR defenses. This group's arsenal includes a range of open-source tools and custom AI solutions that streamline and scale their malicious operations.

https://osintsights.com/uat-10147-deploys-ai-powered-spectre-backdoor-with-edr-bypass?utm_source=mastodon&utm_medium=social

#AipoweredBackdoor #EdrBypass #Uat10147 #China #Cybercrime

An Akira affiliate bypassed EDR and antivirus by booting compromised systems into Safe Mode after gaining access through an exposed SonicWall VPN without MFA. Data was exfiltrated successfully but file encryption failed.

#AkiraRansomware #EDRBypass #SafeModeExploit #EndpointSecurity

https://cyberworldops.eu/en/akira-disables-edr-and-antivirus-in-safe-mode-but-fails-to-encrypt

An Akira affiliate bypassed EDR and antivirus by booting compromised systems into Safe Mode after gaining access through an exposed SonicWall VPN without MFA. Data was exfiltrated successfully but file encryption failed.

#AkiraRansomware #EDRBypass #SafeModeExploit #EndpointSecurity

https://cyberworldops.eu/en/akira-disables-edr-and-antivirus-in-safe-mode-but-fails-to-encrypt

Russian hackers have upped the stealth game—embedding malware in ultra-light Linux VMs via Hyper-V to sidestep detection. Could your systems catch this modern tactic?

https://thedefendopsdiaries.com/russian-hackers-exploit-hyper-v-to-hide-malware-in-lightweight-linux-vms/

#hyperv
#linuxsecurity
#malwareevasion
#virtualization
#cyberattack
#curlycomrades
#edrbypass
#infosec
#threatdetection

Russian hackers have upped the stealth game—embedding malware in ultra-light Linux VMs via Hyper-V to sidestep detection. Could your systems catch this modern tactic?

https://thedefendopsdiaries.com/russian-hackers-exploit-hyper-v-to-hide-malware-in-lightweight-linux-vms/

#hyperv
#linuxsecurity
#malwareevasion
#virtualization
#cyberattack
#curlycomrades
#edrbypass
#infosec
#threatdetection

Russian hackers have upped the stealth game—embedding malware in ultra-light Linux VMs via Hyper-V to sidestep detection. Could your systems catch this modern tactic?

https://thedefendopsdiaries.com/russian-hackers-exploit-hyper-v-to-hide-malware-in-lightweight-linux-vms/

#hyperv
#linuxsecurity
#malwareevasion
#virtualization
#cyberattack
#curlycomrades
#edrbypass
#infosec
#threatdetection

Russian hackers have upped the stealth game—embedding malware in ultra-light Linux VMs via Hyper-V to sidestep detection. Could your systems catch this modern tactic?

https://thedefendopsdiaries.com/russian-hackers-exploit-hyper-v-to-hide-malware-in-lightweight-linux-vms/

#hyperv
#linuxsecurity
#malwareevasion
#virtualization
#cyberattack
#curlycomrades
#edrbypass
#infosec
#threatdetection

EDR Bypass Technique Uses Windows Functions to Put Antivirus Tools to Sleep https://thecyberexpress.com/edr-bypass-technique-disables-antivirus/ #TheCyberExpressNews #MicrosoftWindows #antivirusbypass #TheCyberExpress #FirewallDaily #cybersecurity #CyberNews #EDRbypass #Microsoft #Windows

EDR Bypass Technique Uses Windows Functions to Put Antivirus Tools to Sleep https://thecyberexpress.com/edr-bypass-technique-disables-antivirus/ #TheCyberExpressNews #MicrosoftWindows #antivirusbypass #TheCyberExpress #FirewallDaily #cybersecurity #CyberNews #EDRbypass #Microsoft #Windows

EDR Bypass Technique Uses Windows Functions to Put Antivirus Tools to Sleep https://thecyberexpress.com/edr-bypass-technique-disables-antivirus/ #TheCyberExpressNews #MicrosoftWindows #antivirusbypass #TheCyberExpress #FirewallDaily #cybersecurity #CyberNews #EDRbypass #Microsoft #Windows

EDR Bypass Technique Uses Windows Functions to Put Antivirus Tools to Sleep https://thecyberexpress.com/edr-bypass-technique-disables-antivirus/ #TheCyberExpressNews #MicrosoftWindows #antivirusbypass #TheCyberExpress #FirewallDaily #cybersecurity #CyberNews #EDRbypass #Microsoft #Windows

Crypto24 ransomware isn’t playing by the old rules—it's blending legit software with stealth tools to dodge even the best defenses. Could you be next on its hit list?

https://thedefendopsdiaries.com/crypto24-ransomware-a-new-era-of-cyber-threats/

#crypto24ransomware
#cybersecurity
#ransomware
#edrbypass
#cyberthreats

Crypto24 ransomware isn’t playing by the old rules—it's blending legit software with stealth tools to dodge even the best defenses. Could you be next on its hit list?

https://thedefendopsdiaries.com/crypto24-ransomware-a-new-era-of-cyber-threats/

#crypto24ransomware
#cybersecurity
#ransomware
#edrbypass
#cyberthreats

Crypto24 ransomware isn’t playing by the old rules—it's blending legit software with stealth tools to dodge even the best defenses. Could you be next on its hit list?

https://thedefendopsdiaries.com/crypto24-ransomware-a-new-era-of-cyber-threats/

#crypto24ransomware
#cybersecurity
#ransomware
#edrbypass
#cyberthreats

🎙️✨ Here is a new Brand Story!

Guest: John Stigerwalt & Gregory Hatcher
Episode Title: No Manuals, No Shortcuts: Inside the Offensive Security Mindset at White Knight Labs

🚀 Marco Ciappelli and Sean Martin, CISSP are back — and this time, they’re chatting with the founders of White Knight Labsfor their first Brand Story with ITSPmagazine!

From learning on the field to building red teams to one of the toughest certification programs — John and Greg aren’t just playing the cybersecurity game. They’re rewriting it.

They don’t believe in cookie-cutter pen tests.
They simulate real ransomware attacks.
They write their own loaders.
And they only resell products they’ve personally tested in the wild.

🔥 Passion.
🔍 Precision.
🤝 Purpose.

🎧 Listen or watch now — and meet the team that’s raising the bar for offensive security:
📺 Video Teaser: https://youtu.be/VdGyPFhLAvU
👉 Full Podcast: https://brand-stories-podcast.simplecast.com/episodes/no-manuals-no-shortcuts-inside-the-offensive-security-mindset-at-white-knight-labs-a-white-knight-labs-brand-story-with-co-founders-john-stigerwalt-and-greg-hatcher

📌 Learn more about White Knight Labs on their Brand Page on ITSPmagazine:
https://www.itspmagazine.com/directory/white-knight-labs

🎉 Join us in welcoming White Knight Labs to the ITSPmagazine family!
We already have three more conversations scheduled with them — you won’t want to miss what’s coming next.

Be sure to follow White Knight Labs and the Brand Stories with Sean and Marco podcast to stay connected with this exciting journey.

https://brand-stories-podcast.simplecast.com/

#penetrationtesting #redteam #ransomwaresimulation #offensivesecurity #edrbypass #cybersecuritytraining #whiteknightlabs #apt #cybersecurityservices #defcon #ransomware #pentesting #redteam #hacking #securitypartnerships #infosec #infosecurity

🎙️✨ Here is a new Brand Story!

Guest: John Stigerwalt & Gregory Hatcher
Episode Title: No Manuals, No Shortcuts: Inside the Offensive Security Mindset at White Knight Labs

🚀 Marco Ciappelli and Sean Martin, CISSP are back — and this time, they’re chatting with the founders of White Knight Labsfor their first Brand Story with ITSPmagazine!

From learning on the field to building red teams to one of the toughest certification programs — John and Greg aren’t just playing the cybersecurity game. They’re rewriting it.

They don’t believe in cookie-cutter pen tests.
They simulate real ransomware attacks.
They write their own loaders.
And they only resell products they’ve personally tested in the wild.

🔥 Passion.
🔍 Precision.
🤝 Purpose.

🎧 Listen or watch now — and meet the team that’s raising the bar for offensive security:
📺 Video Teaser: https://youtu.be/VdGyPFhLAvU
👉 Full Podcast: https://brand-stories-podcast.simplecast.com/episodes/no-manuals-no-shortcuts-inside-the-offensive-security-mindset-at-white-knight-labs-a-white-knight-labs-brand-story-with-co-founders-john-stigerwalt-and-greg-hatcher

📌 Learn more about White Knight Labs on their Brand Page on ITSPmagazine:
https://www.itspmagazine.com/directory/white-knight-labs

🎉 Join us in welcoming White Knight Labs to the ITSPmagazine family!
We already have three more conversations scheduled with them — you won’t want to miss what’s coming next.

Be sure to follow White Knight Labs and the Brand Stories with Sean and Marco podcast to stay connected with this exciting journey.

https://brand-stories-podcast.simplecast.com/

#penetrationtesting #redteam #ransomwaresimulation #offensivesecurity #edrbypass #cybersecuritytraining #whiteknightlabs #apt #cybersecurityservices #defcon #ransomware #pentesting #redteam #hacking #securitypartnerships #infosec #infosecurity

🎙️✨ Here is a new Brand Story!

Guest: John Stigerwalt & Gregory Hatcher
Episode Title: No Manuals, No Shortcuts: Inside the Offensive Security Mindset at White Knight Labs

🚀 Marco Ciappelli and Sean Martin, CISSP are back — and this time, they’re chatting with the founders of White Knight Labsfor their first Brand Story with ITSPmagazine!

From learning on the field to building red teams to one of the toughest certification programs — John and Greg aren’t just playing the cybersecurity game. They’re rewriting it.

They don’t believe in cookie-cutter pen tests.
They simulate real ransomware attacks.
They write their own loaders.
And they only resell products they’ve personally tested in the wild.

🔥 Passion.
🔍 Precision.
🤝 Purpose.

🎧 Listen or watch now — and meet the team that’s raising the bar for offensive security:
📺 Video Teaser: https://youtu.be/VdGyPFhLAvU
👉 Full Podcast: https://brand-stories-podcast.simplecast.com/episodes/no-manuals-no-shortcuts-inside-the-offensive-security-mindset-at-white-knight-labs-a-white-knight-labs-brand-story-with-co-founders-john-stigerwalt-and-greg-hatcher

📌 Learn more about White Knight Labs on their Brand Page on ITSPmagazine:
https://www.itspmagazine.com/directory/white-knight-labs

🎉 Join us in welcoming White Knight Labs to the ITSPmagazine family!
We already have three more conversations scheduled with them — you won’t want to miss what’s coming next.

Be sure to follow White Knight Labs and the Brand Stories with Sean and Marco podcast to stay connected with this exciting journey.

https://brand-stories-podcast.simplecast.com/

#penetrationtesting #redteam #ransomwaresimulation #offensivesecurity #edrbypass #cybersecuritytraining #whiteknightlabs #apt #cybersecurityservices #defcon #ransomware #pentesting #redteam #hacking #securitypartnerships #infosec #infosecurity

🎙️✨ Here is a new Brand Story!

Guest: John Stigerwalt & Gregory Hatcher
Episode Title: No Manuals, No Shortcuts: Inside the Offensive Security Mindset at White Knight Labs

🚀 Marco Ciappelli and Sean Martin, CISSP are back — and this time, they’re chatting with the founders of White Knight Labsfor their first Brand Story with ITSPmagazine!

From learning on the field to building red teams to one of the toughest certification programs — John and Greg aren’t just playing the cybersecurity game. They’re rewriting it.

They don’t believe in cookie-cutter pen tests.
They simulate real ransomware attacks.
They write their own loaders.
And they only resell products they’ve personally tested in the wild.

🔥 Passion.
🔍 Precision.
🤝 Purpose.

🎧 Listen or watch now — and meet the team that’s raising the bar for offensive security:
📺 Video Teaser: https://youtu.be/VdGyPFhLAvU
👉 Full Podcast: https://brand-stories-podcast.simplecast.com/episodes/no-manuals-no-shortcuts-inside-the-offensive-security-mindset-at-white-knight-labs-a-white-knight-labs-brand-story-with-co-founders-john-stigerwalt-and-greg-hatcher

📌 Learn more about White Knight Labs on their Brand Page on ITSPmagazine:
https://www.itspmagazine.com/directory/white-knight-labs

🎉 Join us in welcoming White Knight Labs to the ITSPmagazine family!
We already have three more conversations scheduled with them — you won’t want to miss what’s coming next.

Be sure to follow White Knight Labs and the Brand Stories with Sean and Marco podcast to stay connected with this exciting journey.

https://brand-stories-podcast.simplecast.com/

#penetrationtesting #redteam #ransomwaresimulation #offensivesecurity #edrbypass #cybersecuritytraining #whiteknightlabs #apt #cybersecurityservices #defcon #ransomware #pentesting #redteam #hacking #securitypartnerships #infosec #infosecurity

🎙️✨ Here is a new Brand Story!

Guest: John Stigerwalt & Gregory Hatcher
Episode Title: No Manuals, No Shortcuts: Inside the Offensive Security Mindset at White Knight Labs

🚀 Marco Ciappelli and Sean Martin, CISSP are back — and this time, they’re chatting with the founders of White Knight Labsfor their first Brand Story with ITSPmagazine!

From learning on the field to building red teams to one of the toughest certification programs — John and Greg aren’t just playing the cybersecurity game. They’re rewriting it.

They don’t believe in cookie-cutter pen tests.
They simulate real ransomware attacks.
They write their own loaders.
And they only resell products they’ve personally tested in the wild.

🔥 Passion.
🔍 Precision.
🤝 Purpose.

🎧 Listen or watch now — and meet the team that’s raising the bar for offensive security:
📺 Video Teaser: https://youtu.be/VdGyPFhLAvU
👉 Full Podcast: https://brand-stories-podcast.simplecast.com/episodes/no-manuals-no-shortcuts-inside-the-offensive-security-mindset-at-white-knight-labs-a-white-knight-labs-brand-story-with-co-founders-john-stigerwalt-and-greg-hatcher

📌 Learn more about White Knight Labs on their Brand Page on ITSPmagazine:
https://www.itspmagazine.com/directory/white-knight-labs

🎉 Join us in welcoming White Knight Labs to the ITSPmagazine family!
We already have three more conversations scheduled with them — you won’t want to miss what’s coming next.

Be sure to follow White Knight Labs and the Brand Stories with Sean and Marco podcast to stay connected with this exciting journey.

https://brand-stories-podcast.simplecast.com/

#penetrationtesting #redteam #ransomwaresimulation #offensivesecurity #edrbypass #cybersecuritytraining #whiteknightlabs #apt #cybersecurityservices #defcon #ransomware #pentesting #redteam #hacking #securitypartnerships #infosec #infosecurity

Hackers Using AV/EDR Tool “EDRSandBlast” To Bypass Endpoints https://cybersecuritynews.com/av-edr-bypass-tool/ #THREATINTELLIGENCE #EndpointSecurity #CyberSecurity #cybersecurity #EDRBypass #Threats

Hackers Using AV/EDR Tool “EDRSandBlast” To Bypass Endpoints https://cybersecuritynews.com/av-edr-bypass-tool/ #THREATINTELLIGENCE #EndpointSecurity #CyberSecurity #cybersecurity #EDRBypass #Threats

Hackers Using AV/EDR Tool “EDRSandBlast” To Bypass Endpoints https://cybersecuritynews.com/av-edr-bypass-tool/ #THREATINTELLIGENCE #EndpointSecurity #CyberSecurity #cybersecurity #EDRBypass #Threats

RansomHub Ransomware Using Multiple Techniques To Disable EDR And Antivirus https://cybersecuritynews.com/ransomhub-edr-antivirus-bypass/ #CyberSecurityResearch #CyberSecurityNews #EndpointSecurity #cybersecurity #Ransomware #ransomware #EDRBypass

RansomHub Ransomware Using Multiple Techniques To Disable EDR And Antivirus https://cybersecuritynews.com/ransomhub-edr-antivirus-bypass/ #CyberSecurityResearch #CyberSecurityNews #EndpointSecurity #cybersecurity #Ransomware #ransomware #EDRBypass

RansomHub Ransomware Using Multiple Techniques To Disable EDR And Antivirus https://cybersecuritynews.com/ransomhub-edr-antivirus-bypass/ #CyberSecurityResearch #CyberSecurityNews #EndpointSecurity #cybersecurity #Ransomware #ransomware #EDRBypass

Windows MiniFilter Can Be Abused To Bypass EDR https://cybersecuritynews.com/windows-minifilter-bypass-edr/ #CyberSecurityResearch #KernelExploitation #CyberSecurityNews #cybersecuritynews #WindowsMiniFilter #EndpointSecurity #EDRBypass #Windows

Windows MiniFilter Can Be Abused To Bypass EDR https://cybersecuritynews.com/windows-minifilter-bypass-edr/ #CyberSecurityResearch #KernelExploitation #CyberSecurityNews #cybersecuritynews #WindowsMiniFilter #EndpointSecurity #EDRBypass #Windows

Windows MiniFilter Can Be Abused To Bypass EDR https://cybersecuritynews.com/windows-minifilter-bypass-edr/ #CyberSecurityResearch #KernelExploitation #CyberSecurityNews #cybersecuritynews #WindowsMiniFilter #EndpointSecurity #EDRBypass #Windows

Threat Actor Tools Found that Bypass Antivirus, Delete Backups, Disable Systems https://thecyberexpress.com/threat-actor-tools-bypass-antivirus/ #TheCyberExpressNews #CybersecurityNews #antivirusbypass #TheCyberExpress #RansomwareNews #securitybypass #FirewallDaily #threatactors #hackertools #Ransomware #EDRbypass #bypass

Threat Actor Tools Found that Bypass Antivirus, Delete Backups, Disable Systems https://thecyberexpress.com/threat-actor-tools-bypass-antivirus/ #TheCyberExpressNews #CybersecurityNews #antivirusbypass #TheCyberExpress #RansomwareNews #securitybypass #FirewallDaily #threatactors #hackertools #Ransomware #EDRbypass #bypass

Threat Actor Tools Found that Bypass Antivirus, Delete Backups, Disable Systems https://thecyberexpress.com/threat-actor-tools-bypass-antivirus/ #TheCyberExpressNews #CybersecurityNews #antivirusbypass #TheCyberExpress #RansomwareNews #securitybypass #FirewallDaily #threatactors #hackertools #Ransomware #EDRbypass #bypass

Threat Actor Tools Found that Bypass Antivirus, Delete Backups, Disable Systems https://thecyberexpress.com/threat-actor-tools-bypass-antivirus/ #TheCyberExpressNews #CybersecurityNews #antivirusbypass #TheCyberExpress #RansomwareNews #securitybypass #FirewallDaily #threatactors #hackertools #Ransomware #EDRbypass #bypass

✨ Bypassing EDR : In-Memory Execution in macOS - the Old and the New

https://rtx.meta.security/post-exploitation/2022/12/19/In-Memory-Execution-in-macOS.html

Credit: @r34p3r

#redteaming #dfir #threatintel #threathunting #pentesting #infosec #edr #edrbypass

✨ Bypassing EDR : In-Memory Execution in macOS - the Old and the New

https://rtx.meta.security/post-exploitation/2022/12/19/In-Memory-Execution-in-macOS.html

Credit: @r34p3r

#redteaming #dfir #threatintel #threathunting #pentesting #infosec #edr #edrbypass

✨ Bypassing EDR : In-Memory Execution in macOS - the Old and the New

https://rtx.meta.security/post-exploitation/2022/12/19/In-Memory-Execution-in-macOS.html

Credit: @r34p3r

#redteaming #dfir #threatintel #threathunting #pentesting #infosec #edr #edrbypass

✨ Bypassing EDR : In-Memory Execution in macOS - the Old and the New

https://rtx.meta.security/post-exploitation/2022/12/19/In-Memory-Execution-in-macOS.html

Credit: @r34p3r

#redteaming #dfir #threatintel #threathunting #pentesting #infosec #edr #edrbypass

✨ Bypassing EDR : In-Memory Execution in macOS - the Old and the New

https://rtx.meta.security/post-exploitation/2022/12/19/In-Memory-Execution-in-macOS.html

Credit: @r34p3r

#redteaming #dfir #threatintel #threathunting #pentesting #infosec #edr #edrbypass