Windows Defender's Own Driver Weaponized Against It
Check Point researchers have shown how a legitimate Microsoft driver designed to help Windows Defender clean up malware can instead be used to disable Defender itself. The technique bypasses Tamper Protection and affects every Windows version from 7 to 11.