quarkslab

quarkslab's avatar
quarkslab
npub1zhy0...cve0
Securing every bit of your data website: https://quarkslab.com location: Paris, France
Finding a buggy driver is one thing, abusing it is another🧠 In his latest blog post, Luis Casvella shows you how BYOVD can be used as a Reflective Rootkit Loader ! πŸš€ ➑️ image
BYOVD is a well-known technique commonly used by threat actors to kill EDR πŸ”ͺ However, with the right primitives, you can do much more. Find out how Luis Casvella found and exploited 4 vulns (CVE-2025-8061) in a signed Lenovo driver. πŸ‘‡ image
RTFM they say but if you read the manual and copy code examples from it you may inadvertently introduce vulns in your code πŸ™€ In April we audited the PHP code. Now we followed up with a review of the code snippets in PHP documentation and found 81 issues πŸ‘‡