Do Son Black Basta ransomware now embeds a vulnerable NsecSoft driver (BYOVD) to silently kill antivirus processes like Sophos & CrowdStrike.
Cardinal
The Black Basta ransomware group may have exploited a previously unknown vulnerability (CVE-2024-26169) in Windows Error Reporting Service