Site icon WinCert

BYOVD cyberattacking method finally patched?

<p>Microsoft has finally addressed the issue that could have left many Windows users open to various cyberattacks&period;<&sol;p>&NewLine;<p><img class&equals;"alignnone size-full wp-image-4335" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2021&sol;09&sol;hacker-6512174&lowbar;640&period;jpg" alt&equals;"" width&equals;"640" height&equals;"400" &sol;><&sol;p>&NewLine;<p>There is a known cyberattacking method named BringYour Own Vulnerable Driver &lpar;BYOVD&rpar; where attackers can open a backdoor on the system by installing older yet legitimate software drivers that can be vulnerable&period;<&sol;p>&NewLine;<p>Even though Microsoft has addressed the issue&comma; security researchers are warning that this is only a one-time solution for a security issue that needs continuous support&period;<&sol;p>&NewLine;<p>Unfortunately&comma; the number of BYOVD attacks are on the rise during the past several months&period;<&sol;p>&NewLine;<p>According to Microsoft&comma; the vulnerable driver list is being regularly updated although it appears there was a gap in synchronization across the OS versions&period; Microsoft also said that they have corrected this and that it will be serviced with the upcoming and also future Windows Updates&period;<&sol;p>&NewLine;<p>Although Microsoft claimed it has solved the problem with the driver blocklist being regularly updated&comma; security researchers discovered that the company hasn&&num;8217&semi;t updated the list in about three years&period; This means that all vulnerable drivers that were discovered in the past 2-3 years could be used by attackers to get access to OS&period;<&sol;p>&NewLine;<p>Since this is a one-time update process it&&num;8217&semi;s still not clear if Microsoft will push automatic updates for the driver blocklist through Windows Updates&period;<&sol;p>&NewLine;

Exit mobile version