Signed Drivers as Attack Surface: The BTR.sys Privilege Escalation
A legitimately signed Windows boot driver can be weaponized to perform arbitrary kernel operations without exploiting any flaw. What this means for infrastructure security.
Read article →

