Akira ransomware is abusing a legitimate Intel CPU tuning driver to turn off Microsoft Defender in attacks from security tools and EDRs running on target machines. The abused driver is 'rwdrv.sys' ...
Windows Defender has several security settings, including some you need to switch on to get the utmost protection. Here's why.