Hackers exploit gaping Windows loophole to give their malware kernel access Microsoft blocks a new batch of system drivers, but the loophole empowering them remains.

Microsoft blocked code signing certificates predominantly used by Chinese hackers and developers to sign and load malicious kernel mode drivers on breached systems by exploiting a Windows policy ...

“KDP is intended to protect drivers and software running in the Windows kernel (i.e., the OS code itself) against data-driven attacks,” Andrea Allievi, a senior engineer with Microsoft’s ...