256 Newsroom — Uganda's Digital News Infrastructure
Consumer Technology

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot - The Hacker News

Published by Internet By The Hacker News · 21 August 2026 at 18:52
Share
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot - The Hacker News
Image · Internet

What the report says

BTR Reforged uses Defender's signed BTR.sys with an administrator account and SeLoadDriverPrivilege for kernel file and registry operations.

Read the full report at Internet →

Loading debate for this article…

Other publishers covering this story

No additional verified coverage is currently clustered with this report.

More stories by this journalist

Other publications from this journalist — open any story without leaving the article page.

No other published stories from this publisher yet.

Related reporting

China is launching a Moon mission to find water iceThe Independent Uganda 256 Newsroom Ugandan MPs hold talks in Australia on legislative cooperation, digital transformation - pmldaily.comPML Daily BRICS 2026: Journalists taken behind the scenes of India’s disaster resilience effortsNile Post T-Mobile will charge $5/month for Apple’s new iPhone Handoff feature - 9to5Mac9to5Mac The iPhone Duo enters China’s crowded foldable market — and faces a price test - cnbc.comCNBC Here are the iPhone 18 Pro and iPhone 18 Pro Max Geekbench scores - GSMArena.com news - GSMArena.comGSMArena.com