Endpoint Security

DevOps refers to a collection of processes and technologies used in software development and IT operations that reduce the system development life cycle and enable continuous delivery. However, when time and resources are limited, security measures tend to be minimized....

Remote work and cunning cyber foes now dominate the digital realm, thrusting advanced endpoint security tools into must-have status for every organization. The elite 2026 lineup eclipses old-school AV, fusing AI, ML, and behavior scrutiny to preempt ransomware, fileless strikes,...

A significant security vulnerability has been discovered in Palo Alto Networks' GlobalProtect app, potentially allowing attackers to escalate privileges on affected systems. The flaw, which stems from insufficient certification validation, enables malicious actors to connect the GlobalProtect app to...

AV, anti-malware, and EDR are tools that are primarily used to detect and prevent cyber-attacks. While the AV/EDR bypass tools are designed to evade detection by AV and EDR systems. These tools are often used by threat actors for several...

Safe Mode is an operating system diagnostic mode. It is primarily used to troubleshoot issues by loading only essential "drivers" and "services." In Safe Mode, the system operates with minimal functionality, which makes it easier to "isolate the root causes"...

RansomHub is well-known for its affiliate scheme and for employing methods to turn off or disable endpoint detection and response (EDR) to avoid discovery and extend its existence on hacked devices or networks. Experts discovered that Ransomhub integrated the EDRKillShifter...

The Windows MiniFilter driver, like the Sysmon driver, can be abused to prevent EDR drivers from loading.  Endpoint Detection and Response (EDR) processes are difficult for adversaries to stop, even with local administrator or system-level access to an endpoint, because...

Microsoft will host the Windows Endpoint Security Ecosystem Summit at its headquarters in Redmond, Washington. The event will bring together Microsoft, CrowdStrike, and other key partners in the endpoint security sector to discuss strategies for enhancing the resiliency and...

Killer Ultra malware has been found to be targeting endpoint detection and response (EDR) tools from Symantec, Microsoft, and Sentinel One in ransomware attacks. Killer Ultra gathers all Windows event logs, clears them entirely, and acquires kernel-level permissions. ARC Labs has...

Several new vulnerabilities have been discovered in Toshiba e-STUDIO Multi-Function Printers (MFPs) that are used by businesses and organizations worldwide. These vulnerabilities affect 103 different models of Toshiba Multi-Function Printers.  Vulnerabilities identified include Remote Code execution, XML External Entity Injection...