Threat actors are exploiting a flawed Avast Anti-Rootkit driver to bypass detection, disable security tools and compromise targeted systems, Trellix researchers found. The malware corrupts trusted kernel-mode drivers, creating tools to terminate security processes and compromise systems. Several products including Avast, ESET, McAfee and Microsoft Defender were targeted. Organisations are being urged to implement protections against such attacks.
KLAS: Security consulting firms step up as threats rise
In a November 2024 report, KLAS Research identified key healthcare security consulting firms including Tw-Security, Meditology Services, First Health Advisory, Intraprise Health, Fortified Health Security,