EDR-Killer Ecosystem Expansion Requires Stronger BYOVD Defenses

This Dark Reading collection highlights an escalation of active, high-impact threats: EDR-killer tools leveraging bring-your-own-vulnerable-driver (BYOVD) techniques, multiple actively exploited zero-days (notably an Adobe Acrobat/Reader PDF zero-day and an emergency-patched FortiClient flaw), and rapid ransomware and credential-theft campaigns (Storm-1175/Medusa, automated React2Shell credential harvesting). Nation-state and criminal groups (APT41, APT28/Fancy Bear, Iranian actors) are targeting cloud credentials, SOHO routers, and Internet-exposed OT/PLC devices, while supply-chain and AI‑dr