threat-intel
'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
Info
Summary
Researchers at LevelBlue have developed a proof-of-concept (PoC) called 'BigDiskBuster' that prevents Microsoft Defender from receiving updates by consuming all available disk space. While not a zero-day exploit, it highlights a potential weakness in Defender's update process and requires monitoring for specific indicators of compromise.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data