signed drivers – PossibleThreat Articles

Security Sophos

April showers Windows updates on sysadmins

April 11, 2023 0 Comments cve-2023-21554, cve-2023-28231, cve-2023-28250, cve-2023-28252, featured, l2tp, office, Patch Tuesday, pcl5, postscript, signed drivers, threat research, Windows

Credit to Author: Angela Gunn| Date: Tue, 11 Apr 2023 18:34:37 +0000

A 98-CVE Patch Tuesday marks another big haul for the OS

Security Sophos

Signed driver malware moves up the software trust chain

December 13, 2022 0 Comments 2022-12, adv220005, burntcigar, byovd, cuba ransomware, driver signature enforcement, drivers, featured, Patch Tuesday, sbom, security operations, signed drivers, sophos x-ops, supply chain compromise, threat research, whcp, whql, Windows, x-ops

Credit to Author: Andrew Brandt| Date: Tue, 13 Dec 2022 18:00:15 +0000

The criminals signed their AV-killer malware, closely related to one known as BURNTCIGAR, with a legitimate WHCP certificate