What's new in Elastic Defend: 800+ vulnerable driver rules, automated troubleshooting, and ARM support

Elastic Defend automatically generates and instantly deploys vulnerable driver YARA rules from VirusTotal, LOLDrivers and Microsoft's blocklist, closing the gap BYOVD attacks depend on. Plus a new troubleshooting skill and ARM endpoint protection.

Summary from Elastic Security Labs.

More in Endpoint

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

BleepingComputeryesterdayThreat IntelEndpointVulnerabilities

PHP2Shell: Exposure and Response with the CrowdStrike Falcon Platform

VideoCrowdStrike2d agoEndpointVulnerabilitiesCVE-2026-109618CVE-2026-109619

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

The Hacker News2d agoThreat IntelEndpointVulnerabilities

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

The Hacker News2d agoThreat IntelEndpointAI

Microsoft: Windows Server 2016 reaches end of support in January

BleepingComputer2d agoEndpoint