Re:Hackers exploited Windows 0-day for 6 months after Micros...
by tamimio on Tuesday March 05, 2024 @08:21PM
(#39611183)
> To work with supported versions of Windows, third-party drivers must first be digitally signed by Microsoft to certify that they are trustworthy and meet security requirements.
Re:Hackers exploited Windows 0-day for 6 months after Micros...
by Arnavion on Wednesday March 06, 2024 @12:52AM
(#39612754)
Your link is about AVs implementing signature verification of binaries incorrectly, not Windows implementing signature verification of drivers incorrectly.
That’s a very bold statement when you can replicate a signature, so now the malware is “trustworthy” https://github.com/secretsquirrel/SigThief