Posts on kernel-security

Driver as a Weapon: How BYOVD Reaches Into the Kernel

BYOVD isn't new — but it's still punching holes through EDRs. Here's what attackers do, and what defenders actually need to fix.