# Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot

> **Newsylist Open Intelligence Dossier** · First detected: 2026-08-22 09:29 UTC · Category: Technology · Sources: 6 · Current Velocity: 3.67

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| cyberpress.org | Microsoft-Signed Defender Driver Weaponized to Disable EDR and Antivirus | 2026-08-21 15:52 | [Source Link](https://news.google.com/rss/articles/CBMikwFBVV95cUxPQVJ0aU1DSnluOEYzaXVYQ3IwdHduRXpCaVFCVlJzQ0p1WXhkRzFiai1BQ3JSSlNPRzV2REgwWWdrczRqVm1tb0pVVVVCcFJOb2VzdFFQeEllZVpRTElqNW16eEpEMTV6T3Y5SjRNMGlJV1Q3alVSeW1CWkY3bHJSSWY1Zng5N1RLM0dCQmV0S0FINTDSAZMBQVVfeXFMT0FSdGlNQ0p5bjhGM2l1WENyMHR3bkV6QmlRQlZSc0NKdVl4ZEcxYmotQUNyUkpTT0c1dkRIMFlna3M0alZtbW9KVVVVQnBSTm9lc3RRUHhJZWVaUUxJajVtenhKRDE1ek92OUo0TTBpSVdUN2pVUnltQlpGN2xyUklmNWZ4OTdUSzNHQkJldEtBSDUw?oc=5) |
| CyberSecurityNews | Microsoft Defender Driver Can Be Weaponized to Disable EDR and AV From Windows Kernel | 2026-08-21 15:52 | [Source Link](https://news.google.com/rss/articles/CBMickFVX3lxTE53SmpvUGpvd2JXZ24xRFBIZ0JXb29MRkNycnNMa0UtTkh0aXRqdHZKYTRla2d4djlnZ1c0MjRDUEpQVmszY0VqbFhNU0taNWZwSHQ1X0owbGxzNGxxNFNXUWdxS3N3LUlqX3RrOXpoNGRPZ9IBd0FVX3lxTE9vMnY3ZkU3dHQwcDFWV01lbkVUTW13Q2NraXRDUVJfYk5fazRRT2VXS3hZRjRoVS1CYnJVeDEyVW8tZi1PMHh4c29OYTZnY3d5WW5ZSkxQMGxvaHNjR2NHZkJwOUVEcVRJQVdzbEd4SURCNzhhSWc4?oc=5) |
| gbhackers.com | Windows Defender Driver Abuse Enables Kernel-Level EDR and Antivirus Bypass | 2026-08-21 15:52 | [Source Link](https://news.google.com/rss/articles/CBMiWkFVX3lxTE1VM3Npd3RhZ1d3VzYtZUdJdThiRGttRC1yUGwwQXZJWnYwNlZqWGVfY3owSU9McFpQUlNkLThKS3FzdEtzcHpsMHpwRGhDRzlxREVFN1BjSjFWQdIBX0FVX3lxTE0tdnEtOEhmeElFQTFKNHFzVEpMZ1Uxdm9qanFZSDlxY0lPaUFkQlBSdnZ4VVp5SFc3c0J5M3dlRk8wcUxfR2lHWklVdjkyelRCLVRtbG5fc29mZzBqY2xJ?oc=5) |
| SC Media | Researchers find way to weaponize Windows Defender’s own driver | 2026-08-21 15:52 | [Source Link](https://news.google.com/rss/articles/CBMilwFBVV95cUxNZFV0RDRHMzFhZldYM2c3cWg2Uml1NFoxRDEwcVNTNXFiRkc1UW9FbzR4NnpjMmZJQnQzTUNwc28xYjBfcnZnb2t6V0pEUi1vX0U1S0NPLUVxdHFKTHVmb1E1Z2lSRVNCQmJEdHhFNXR5U1d1YlZRYlpXd1plaktvaVZwMW1XRkFibXNDUjExNWllZVc1NDZz?oc=5) |
| Check Point Research | BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive | 2026-08-21 15:52 | [Source Link](https://news.google.com/rss/articles/CBMiwAFBVV95cUxObEs5REtPQ1dZN2RreEhUZTBiZFJDMl9lWEd0LWRyTTZ4cF9tNzZZSTJQY21vcldRaVFDVDFXWVZPQktkQVJvaVRhT21LNFJwOUhMUlk5TjZCMmJxM3EtTkhBaElIT2UtV3FwSVRSaklwcHVVN19uYjhnbU84SThuajVyM18yZl9fVE55WkU4MUpQS1F0aHgyQXMtaEtaZEgxVnVUS0NBdDJoV2gwanEzWlBXVTI0a0R3TjRFeGxjeGY?oc=5) |
| The Hacker News | Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot | 2026-08-21 15:52 | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxPRlBVbDN1Q3ZPU3Fqc2NCTmp4NURmOGJBSWdmbWY4X1E2eXNBdmt4UXZOTHVHYnpXUDl4Vkc0SEdUZ0MwclVsUXhXdWxMUWJ6T2FoZS1iSWs0ZUhPczdTLWVPUURHckVUOUlSMnZCRFhjWVZIeHdJZ3FKX3dMU2VSNTRn?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-08-22/microsoft-defender-s-own-driver-can-be-weaponized-to-delete-security-software*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*