Vulnerabilities

Microsoft Defender Driver Abused for Kernel File Deletion

August 21, 2026 1 min read 5 views
cybersecurity threats news
Check Point Research found that Microsoft Defender's signed BTR.sys driver can be weaponized to delete security software at boot on Windows 7-11, without exploiting a flaw.

Was this article helpful?

0 found this helpful

Related Articles

Jev and other decision models can still be tricked with prompt injection

3 min read

EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

1 min read

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

1 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo