Shulou(Shulou.com)05/31 Report--

Recently, cyber security company Eclypsium said that more than 40 different drivers provided by more than 20 third-party companies for Windows are of poor code quality and may be exploited by hackers, all of which have been certified by Microsoft.

Not all of these drivers are the product of "small workshops". The companies on Eclypsium's list include large companies such as Asustek, Huawei, Intel, NVIDIA and Toshiba.

Eclypsium says these drivers can affect all versions of Windows, which means that at least millions of Windows users face security risks because these drivers run malicious applications to gain kernel privileges at the user level, giving direct access to firmware and hardware.

Eclypsium stressed that malware can be installed directly into the firmware through these drivers, so reinstalling the system may not even completely solve the problem.

If a vulnerable driver already exists in the system, the malicious application only needs to use it to gain permissions. If these drivers do not exist on the computer, malicious applications may come with drivers to guide the user to install, but require administrator approval to install them.

In response, Microsoft suggests that users can use Windows Defender to block software and drivers from unknown sources.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.