Back to today’s briefing

Story perspectives

Ransomware Exploits Paragon Driver Flaws; Updates Released

3/5/2025

27 5

Summary

Story summary

Ransomware attackers are taking advantage of weaknesses in the BioNTdrv.sys driver from Paragon Partition Manager, seizing SYSTEM-level control of Windows systems. Five security flaws have been uncovered, with one being actively exploited. In response, Paragon has issued an updated driver, while Microsoft has added the vulnerable versions to its blocklist to protect users.

1 of 1

Story summary

Ransomware attackers are taking advantage of weaknesses in the BioNTdrv.sys driver from Paragon Partition Manager, seizing SYSTEM-level control of Windows systems. Five security flaws have been uncovered, with one being actively exploited. In response, Paragon has issued an updated driver, while Microsoft has added the vulnerable versions to its blocklist to protect users.