Skip to content
Threat Feed
Subscribe

Product

Windows Defender Antivirus

2 briefs RSS
high advisory

Potential Disabling of Windows Defender Antivirus via Registry Modification

An attacker might attempt to disable Windows Defender Antivirus by modifying specific registry keys, potentially leading to a system vulnerable to malware and other threats.

Windows Defender Antivirus windowsdefender registry antivirus disable malware
2r 1t
medium advisory

MpCmdRun Used for Remote File Download

Attackers are abusing the Windows Defender command-line utility, MpCmdRun.exe, to download malicious files from remote URLs, enabling them to introduce malware or offensive tooling into compromised environments.

Windows Defender Antivirus living-off-the-land file-download windows
2r 1t