Attackers can downgrade Windows kernel components to bypass security features such as Driver Signature Enforcement and deploy rootkits on fully patched systems. This is possible by taking control of ...

Hackers are using open source tools to exploit a Windows policy loophole for kernel mode drivers to load malicious and unverified drivers with expired certificates, researchers have found. The ...

Attackers abused a signed but long-revoked EnCase Windows kernel driver in a BYOVD attack to terminate all security tools.

Windows Driver Foundation – User-mode Driver Framework (WUDFHost.exe) is a set of libraries and tools by Microsoft which helps reduce the complexity while writing Windows drivers. It pushes drivers to ...