TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8386
@thehackernews
The Hacker News
Post content
Post content
⚠️🛠️ Reynolds ransomware embeds its own BYOVD evasion, bundling a vulnerable driver to disable EDR before encryption. It drops the NSecKrnl driver (CVE-2025-68947) to kill security tools, reducing detection and affiliate effort. 🔗 Read full attack chain and defense insights → https://thehackernews.com/2026/02/reynolds-ransomware-embeds-byovd-driver.html