Attackers use vulnerabilities in MS-signed 3rd party drivers as malware loaders. Most attackers use drivers with known vulnerabilities, but every now and then t

Attackers use vulnerabilities in MS-signed 3rd party drivers as malware loaders. Most attackers use drivers with known vulnerabilities, but every now and then they come up with something new. More details and mitigation instructions can be found here: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules https://learn.microsoft.com/en-us/windows/security/applicati...