NSecSoftBYOVD

NSecSoftBYOVD Aggiornamento 2026.1.13: alla vulnerabilità è stato assegnato il numero CVE-2025-68947 Riferimenti: https://bbs.kafan.cn/thread-2284992-1-1.html, https://blog.csdn.net/qq40827990/article/details/148997201 Tecniche analoghe sono ampiamente utilizzate da Silverfox Group per terminare ...

VulnCheck KEV: CVE-2025-68947

NSecsoft 'NSecKrnl' is a Windows driver that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes by issuing crafted IOCTL requests to the driver...

CVE-2025-68947

NSecsoft NSecKrnl is a Windows driver that permits a local, authenticated attacker to terminate processes owned by other users (including SYSTEM and Protected Processes) by sending crafted IOCTL requests. Multiple sources (including Reynolds ransomware and CVE records) describe this as a BYOVD an...