The forensic tool's driver was signed with a digital certificate that expired years ago, but major security gaps allowed ...

Hackers are abusing a legitimate but long-revoked EnCase kernel driver in an EDR killer that can detect 59 security tools in ...

Attackers abused a signed but long-revoked EnCase Windows kernel driver in a BYOVD attack to terminate all security tools.

Intel released today an updated version of its PMx driver to fix a set of vulnerabilities that could grant attackers "near-omnipotent control over a victim device." The vulnerabilities were discovered ...