
In an alarming revelation, cybersecurity experts have uncovered a sophisticated campaign exploiting a significant flaw in a Windows driver to evade endpoint detection and response (EDR) systems and deploy the Gh0st RAT malware. This campaign targets vulnerabilities in the Truesight driver, known as truesight.sys, particularly an arbitrary process termination bug in versions below 3.4.0. Previously used in proof-of-concept exploits such