#edrbypass — Public Fediverse posts

Check Point details BTR.sys driver abuse: a signed Defender component turned into a kernel EDR/AV bypass with no exploit needed.

#BTRsys #EDRBypass #Windows #Defender #KernelSecurity #LOLDriver #CheckPoint #InfoSec

http://securityonline.info/btr-sys-driver-edr-bypass/?utm_source=mastodon&utm_medium=jetpack_social

UAT-10147 Deploys AI-Powered SPECTRE Backdoor with EDR Bypass

Meet UAT-10147, a Chinese-speaking cybercrime group that's taking AI-powered attacks to the next level with its sophisticated SPECTRE backdoor, capable of bypassing EDR defenses. This group's arsenal includes a range of open-source tools and custom AI solutions that streamline and scale their malicious operations.

https://osintsights.com/uat-10147-deploys-ai-powered-spectre-backdoor-with-edr-bypass?utm_source=mastodon&utm_medium=social

#AipoweredBackdoor #EdrBypass #Uat10147 #China #Cybercrime

Russian hackers have upped the stealth game—embedding malware in ultra-light Linux VMs via Hyper-V to sidestep detection. Could your systems catch this modern tactic?

https://thedefendopsdiaries.com/russian-hackers-exploit-hyper-v-to-hide-malware-in-lightweight-linux-vms/

#hyperv
#linuxsecurity
#malwareevasion
#virtualization
#cyberattack
#curlycomrades
#edrbypass
#infosec
#threatdetection

EDR Bypass Technique Uses Windows Functions to Put Antivirus Tools to Sleep https://thecyberexpress.com/edr-bypass-technique-disables-antivirus/ #TheCyberExpressNews #MicrosoftWindows #antivirusbypass #TheCyberExpress #FirewallDaily #cybersecurity #CyberNews #EDRbypass #Microsoft #Windows

🎙️✨ Here is a new Brand Story!

Guest: John Stigerwalt & Gregory Hatcher
Episode Title: No Manuals, No Shortcuts: Inside the Offensive Security Mindset at White Knight Labs

🚀 Marco Ciappelli and Sean Martin, CISSP are back — and this time, they’re chatting with the founders of White Knight Labsfor their first Brand Story with ITSPmagazine!

From learning on the field to building red teams to one of the toughest certification programs — John and Greg aren’t just playing the cybersecurity game. They’re rewriting it.

They don’t believe in cookie-cutter pen tests.
They simulate real ransomware attacks.
They write their own loaders.
And they only resell products they’ve personally tested in the wild.

🔥 Passion.
🔍 Precision.
🤝 Purpose.

🎧 Listen or watch now — and meet the team that’s raising the bar for offensive security:
📺 Video Teaser: https://youtu.be/VdGyPFhLAvU
👉 Full Podcast: https://brand-stories-podcast.simplecast.com/episodes/no-manuals-no-shortcuts-inside-the-offensive-security-mindset-at-white-knight-labs-a-white-knight-labs-brand-story-with-co-founders-john-stigerwalt-and-greg-hatcher

📌 Learn more about White Knight Labs on their Brand Page on ITSPmagazine:
https://www.itspmagazine.com/directory/white-knight-labs

🎉 Join us in welcoming White Knight Labs to the ITSPmagazine family!
We already have three more conversations scheduled with them — you won’t want to miss what’s coming next.

Be sure to follow White Knight Labs and the Brand Stories with Sean and Marco podcast to stay connected with this exciting journey.

https://brand-stories-podcast.simplecast.com/

#penetrationtesting #redteam #ransomwaresimulation #offensivesecurity #edrbypass #cybersecuritytraining #whiteknightlabs #apt #cybersecurityservices #defcon #ransomware #pentesting #redteam #hacking #securitypartnerships #infosec #infosecurity

Hackers Using AV/EDR Tool “EDRSandBlast” To Bypass Endpoints https://cybersecuritynews.com/av-edr-bypass-tool/ #THREATINTELLIGENCE #EndpointSecurity #CyberSecurity #cybersecurity #EDRBypass #Threats

RansomHub Ransomware Using Multiple Techniques To Disable EDR And Antivirus https://cybersecuritynews.com/ransomhub-edr-antivirus-bypass/ #CyberSecurityResearch #CyberSecurityNews #EndpointSecurity #cybersecurity #Ransomware #ransomware #EDRBypass

Windows MiniFilter Can Be Abused To Bypass EDR https://cybersecuritynews.com/windows-minifilter-bypass-edr/ #CyberSecurityResearch #KernelExploitation #CyberSecurityNews #cybersecuritynews #WindowsMiniFilter #EndpointSecurity #EDRBypass #Windows

Threat Actor Tools Found that Bypass Antivirus, Delete Backups, Disable Systems https://thecyberexpress.com/threat-actor-tools-bypass-antivirus/ #TheCyberExpressNews #CybersecurityNews #antivirusbypass #TheCyberExpress #RansomwareNews #securitybypass #FirewallDaily #threatactors #hackertools #Ransomware #EDRbypass #bypass

✨ Bypassing EDR : In-Memory Execution in macOS - the Old and the New

https://rtx.meta.security/post-exploitation/2022/12/19/In-Memory-Execution-in-macOS.html

Credit: @r34p3r

#redteaming #dfir #threatintel #threathunting #pentesting #infosec #edr #edrbypass