Windows Defender-Pretender Attack Dismantles Flagship Microsoft EDR

A newly patched flaw in Windows Defender allows attackers to hijack the signature-update process to sneak in malware, delete benign files, and inflict mayhem on target systems.

attack attackers defender delete edr files flaw hijack malware microsoft pretender process signature systems target update windows windows defender