Not very gentlemanly: Analyzing a zero-day exploit used to disable targets' EDRs

Reported 30 Jun 2026 by otx · Severity: medium

The Gentlemen ransomware group, which emerged in July 2025, employed a zero-day vulnerability in a bring-your-own-vulnerable-driver (BYOVD) attack to disable endpoint detection and response systems. During an incident investigated in early April, the group leveraged an obscure th