Microsoft update renders signed driver malware obsolete
Back in October, Microsoft was informed that drivers certified by Microsoft’s Windows Hardware Developer Program were being used in a malicious way in post-exploitation activity. Microsoft was made aware of this activity by security companies SentinelOne, Mandiant, and Sophos and were quick to perform an investigation. Christopher Budd, senior manager of threat research in the… … continue reading
