What do Windows 10 and Uber or Lyft have in common? One bad driver can really ruin your day. And 40 can totally ruin your month

DEF CON Too many trusted Windows 10 peripheral drivers, signed off by Microsoft and running with powerful kernel-level privileges, are riddled with exploitable security vulnerabilities, according to infosec biz Eclypsium. During a talk [PDF] at this year’s DEF CON hacking shindig in Las Vegas, Eclypsium’s Jesse Michael and Mickey Shkatov warned that the driver software, which is developed by major vendors to ensure their devices work with Windows 10 systems, can be compromised by malware or rogue logged-in users to elevate their privileges and gain total control over otherwise fully patched computers.

Read full article on The Register

 


Date:

Categorie(s):

Tag(s):