Akira ransomware abuses CPU tuning tool to disable Microsoft Defender

Published on August 6, 2025

Akira ransomware is abusing a legitimate Intel CPU tuning driver to turn off Microsoft Defender in attacks from security tools and EDRs running on target machines. [...]