The ALPHV ransomware group (aka BlackCat) was observed employing signed malicious Windows kernel drivers to evade detection by security software during attacks. The driver seen by Trend Micro is an ...

Hackers are using open source tools to exploit a Windows policy loophole for kernel mode drivers to load malicious and unverified drivers with expired certificates, researchers have found. The ...

Microsoft is tightening security in Windows 11. Starting April 2026, outdated kernel drivers will be phased out—the company’s response to a well-known security issue that has plagued Windows for years ...

The ransomware gang was able to use signed malicious drivers to disable endpoint security tools. Microsoft has revoked the certificates. Microsoft suspended several accounts on its hardware developer ...

ESET researchers took an in-depth look into the abuse of vulnerable kernel drivers. Vulnerabilities in signed drivers are mostly utilized by game cheat developers to circumvent anti-cheat mechanisms, ...

Microsoft says it addressed an issue preventing the Windows kernel vulnerable driver blocklist from being synced to systems running older Windows versions. This blocklist (stored in the DriverSiPolicy ...

A kernel-level flaw buried in the Windows networking stack let North Korean spies seize full system control over defense and aerospace targets while dressed as LinkedIn recruiters — for weeks before a ...

Windows 10 will not load unsigned kernel mode drivers, starting with version 1607 of the operating system. This is something that had been announced back in 2015, but is only just being implemented.