For years, Microsoft’s out-of-date driver list exposed Windows PCs to malware assaults

Several of these assaults have already occurred in the wild. Hackers put the BlackByte ransomware in August on a weak driver for the overclocking software MSI AfterBurner. In another recent example, fraudsters exploited a flaw in the anti-cheat driver for the game Genshin Impact. North Korean hacker outfit Lazarus launched a BYOVD assault in 2021 against an aerospace employee in the Netherlands and a political journalist in Belgium, but security company ESET only discovered it late last month.