EDR killer tool uses signed kernel driver from forensic software

Published on February 4, 2026

Hackers are abusing a legitimate but long-revoked EnCase kernel driver in an EDR killer that can detect 59 security tools in attempts to deactivate them. [...]

Continue reading on website
Other news

China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage Campaigns

February 4, 2026
Threat actors affiliated with China have been attributed to a fresh set of cyber espionage campaigns targeting government and law enforcement agencies across Southeast Asia throughout 2025.Check Point Research is tracking the previously undocumented activity cluster under the moniker Amaranth-Dragon, which it said shares links to the APT 41 ecosystem. Targeted countries include Cambodia,

The Double-Edged Sword of Non-Human Identities

February 4, 2026
Leaked non-human identities like API keys and tokens are becoming a major breach driver in cloud environments. Flare shows how exposed machine credentials quietly grant attackers long-term access to enterprise systems. [...]