Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Defending Against 'GodDamn' Ransomware: BYOVD Attacks Exploiting Microsoft-Signed Kernel Drivers
Introduction A critical shift in the threat landscape has emerged with the active exploitation of a malicious kernel driver that was erroneo...
GentleKiller: Countering The Gentlemen's BYOVD EDR-Bypass Attack Chain
Introduction On June 18, 2026, ESET published a comprehensive breakdown of "The Gentlemen," a ransomware-as-a-service (RaaS) operation that ...
GentleKiller & The Gentlemen: Hunting EDR-Killer BYOVD Attacks
Introduction On June 18, 2026, ESET released a comprehensive analysis of "The Gentlemen," a cybercrime syndicate aggressively deploying a so...
BYOVD Research: Bypassing Hardware-Gated Drivers – Detection & Mitigation
Introduction For years, security practitioners have operated under a reasonable assumption: if a vulnerable kernel driver requires specific ...
Hydra Saiga, Warlock BYOVD & JanaWare: OTX Pulse Analysis — Critical Infrastructure & Ransomware Threats
Threat Summary Recent OTX pulses highlight a convergence of state-sponsored espionage and financially motivated ransomware activity. The Hyd...
BYOVD Threat Mitigation: Detecting EDR-Killer Drivers (CVE-2019-16098, CVE-2021-21551)
Introduction The "Bring Your Own Vulnerable Driver" (BYOVD) attack vector has graduated from a proof-of-concept to a staple in the arsenal o...
Adwind RAT, Warlock & Payouts King: Ransomware & EDR Evasion Analysis — Enterprise Detection Pack
Adwind RAT, Warlock & Payouts King: Ransomware & EDR Evasion Analysis — Enterprise Detection Pack Threat Summary Recent OTX pulses indicate ...
ASO RAT, Adwind/JanaWare, and Warlock LockBit: Multi-Vector Threat Analysis — Enterprise Detection Pack
ASO RAT, Adwind/JanaWare, and Warlock LockBit: Multi-Vector Threat Analysis Date: 2026-04-16 Author: Security Arsenal Research Team --- Thre...
Intel: BYOVD Ransomware (Qilin/Warlock) & Storm-1175 Rapid Attacks — April 2026
Telegram Intelligence Brief: BYOVD Ransomwave & Storm-1175 Operations Date: 2026-04-14 Source Channels: @TheHackerNews, @RedPacketSecurity I...