KHOBE – 8.0 earthquake for Windows desktop security software

Ancora una lettura.

I dag, we reveal even more serious problem of the Windows desktop security products that can be exploited to bypass a big portion of security features implemented by the affected products. The protection implemented by kernel mode drivers of today’s security products can be bypassed effectively by a code running on an unprivileged user account. If you ever heard of SSDT hooks or similar techniques to implement various security features such as products’ self-defense, we will show you how to bypass the protection easily.

KHOBE

The post KHOBE – 8.0 earthquake for Windows desktop security software appeared first on .