# Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot

> **Open Intelligence Dossier** · First detected: 2026-08-22 09:07 UTC · Category: Technology

## Executive Summary
5 news sources are covering this Technology story right now — PULSE is tracking how fast it spreads.

## Intelligence Brief
"Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot" is generating significant coverage in the Technology category, with 5 articles from 5 distinct sources tracked by PULSE so far.


Outlets currently covering the story include CyberSecurityNews, gbhackers.com, SC Media and Check Point Research. PULSE measures a story's velocity from how quickly new articles appear and how many independent newsrooms join the coverage.


This brief was generated by PULSE's extractive engine from coverage metadata only. The latest headlines from every source are listed below; the velocity chart shows how the story is developing in real time.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| CyberSecurityNews | Microsoft Defender Driver Can Be Weaponized to Disable EDR and AV From Windows Kernel | [Source Link](https://news.google.com/rss/articles/CBMickFVX3lxTE53SmpvUGpvd2JXZ24xRFBIZ0JXb29MRkNycnNMa0UtTkh0aXRqdHZKYTRla2d4djlnZ1c0MjRDUEpQVmszY0VqbFhNU0taNWZwSHQ1X0owbGxzNGxxNFNXUWdxS3N3LUlqX3RrOXpoNGRPZ9IBd0FVX3lxTE9vMnY3ZkU3dHQwcDFWV01lbkVUTW13Q2NraXRDUVJfYk5fazRRT2VXS3hZRjRoVS1CYnJVeDEyVW8tZi1PMHh4c29OYTZnY3d5WW5ZSkxQMGxvaHNjR2NHZkJwOUVEcVRJQVdzbEd4SURCNzhhSWc4?oc=5) |
| gbhackers.com | Windows Defender Driver Abuse Enables Kernel-Level EDR and Antivirus Bypass | [Source Link](https://news.google.com/rss/articles/CBMiWkFVX3lxTE1VM3Npd3RhZ1d3VzYtZUdJdThiRGttRC1yUGwwQXZJWnYwNlZqWGVfY3owSU9McFpQUlNkLThKS3FzdEtzcHpsMHpwRGhDRzlxREVFN1BjSjFWQdIBX0FVX3lxTE0tdnEtOEhmeElFQTFKNHFzVEpMZ1Uxdm9qanFZSDlxY0lPaUFkQlBSdnZ4VVp5SFc3c0J5M3dlRk8wcUxfR2lHWklVdjkyelRCLVRtbG5fc29mZzBqY2xJ?oc=5) |
| SC Media | Researchers find way to weaponize Windows Defender’s own driver | [Source Link](https://news.google.com/rss/articles/CBMilwFBVV95cUxNZFV0RDRHMzFhZldYM2c3cWg2Uml1NFoxRDEwcVNTNXFiRkc1UW9FbzR4NnpjMmZJQnQzTUNwc28xYjBfcnZnb2t6V0pEUi1vX0U1S0NPLUVxdHFKTHVmb1E1Z2lSRVNCQmJEdHhFNXR5U1d1YlZRYlpXd1plaktvaVZwMW1XRkFibXNDUjExNWllZVc1NDZz?oc=5) |
| Check Point Research | BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive | [Source Link](https://news.google.com/rss/articles/CBMiwAFBVV95cUxObEs5REtPQ1dZN2RreEhUZTBiZFJDMl9lWEd0LWRyTTZ4cF9tNzZZSTJQY21vcldRaVFDVDFXWVZPQktkQVJvaVRhT21LNFJwOUhMUlk5TjZCMmJxM3EtTkhBaElIT2UtV3FwSVRSaklwcHVVN19uYjhnbU84SThuajVyM18yZl9fVE55WkU4MUpQS1F0aHgyQXMtaEtaZEgxVnVUS0NBdDJoV2gwanEzWlBXVTI0a0R3TjRFeGxjeGY?oc=5) |
| The Hacker News | Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxPRlBVbDN1Q3ZPU3Fqc2NCTmp4NURmOGJBSWdmbWY4X1E2eXNBdmt4UXZOTHVHYnpXUDl4Vkc0SEdUZ0MwclVsUXhXdWxMUWJ6T2FoZS1iSWs0ZUhPczdTLWVPUURHckVUOUlSMnZCRFhjWVZIeHdJZ3FKX3dMU2VSNTRn?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-08-22/microsoft-defender-s-own-driver-can-be-weaponized-to-delete-security-software*