Elastic EDR 0-Day Flaw Lets Hackers Evade Detection, Run Malware, and Trigger BSOD

Threat Score:
78
GB Hackers
8 hours ago

Overview

Elastic EDR 0-Day Flaw Lets Hackers Evade Detection, Run Malware, and Trigger BSOD AshES Cybersecurity has disclosed a severe zero-day vulnerability in Elastic’sEndpoint Detection and Response (EDR)software that transforms the security tool into a weapon against the systems it’s designed to protect. The flaw, found in the Microsoft-signed kernel driver “elastic-endpoint-driver.sys,” enables attackers to bypass security measures, execute malicious code, and crash protected systems repeatedly. Des...

Related Articles

5 articles
2

Top 10 Best Patch Management Software For IT Security 2025

GB Hackers • 4 hours ago

Top 10 Best Patch Management Software For IT Security 2025 In the relentless battle against cyber threats in 2025, unpatched software remains a gaping vulnerability exploited by attackers worldwide. Outdated operating systems, applications riddled with known flaws, and missing security updates create an open invitation for malware, ransomware, and data breaches. Effective patch management the process of identifying, acquiring, testing, and deploying software updates to fix thesevulnerabilities–

Score
81
Read more
3
U.S. seizes $2.8 million in crypto from Zeppelin ransomware operator

U.S. seizes $2.8 million in crypto from Zeppelin ransomware operator

BleepingComputer • 7 hours ago

U.S. seizes $2.8 million in crypto from Zeppelin ransomware operator Bill Toulas August 17, 2025 10:36 AM 0 The U.S. Department of Justice (DoJ) announced the seizure of more than $2.8 million in cryptocurrency from suspected ransomware operator Ianis Aleksandrovich Antropenko. Antropenko, indicted in Texas for computer fraud and money laundering, was linked to Zeppelin ransomware, a now-defunct extortion operation that ran between 2019 and 2022. Apart from the digital asset seizure, the authori

Score
74
Read more
4

Ransomware Allegations Surface As Colt Outages Continue

Data Breach Today UK • 5 hours ago

Support Portals Offline as Ransomware Gang Claims It Stolen Data British-based multinational telecom Colt Technology Services said a "cyber incident" is responsible for days-long disruptions to its customer portal and support services. The WarLock ransomware operation took responsibility for the hack, asserting it stole "1 million documents."

Score
73
Read more
5

Duolingo's Stock Down 38%, Plummets After OpenAI's GPT-5 Language App-Building Demo

Slashdot • 1 hour ago

Duolingo's stock peaked at $529.05 on May 16th. Three months later, it's down 38% — with that drop starting shortly after backlash to the CEO's promise to make it an "AI-first" company. Yet "The backlash against Duolingo going 'AI-first' didn't even matter," TechCrunch wrote August 7th, noting Duolingo's stock price surged almost 30% overnight. That surge vanished within two days — and instead of a 30% surge, Duolingo now shows a 5% drop over the last eight days. Yahoo Finace blames the turnarou

Score
72
Read more