Back to today’s briefing

Story perspectives

Cybercriminals Exploit Antivirus Vulnerabilities in Major Breach

3/21/2025

23 5

Summary

Story summary

Cybercriminals have taken advantage of weaknesses in CheckPoint's ZoneAlarm antivirus driver, vsdatant.sys, through a Bring Your Own Vulnerable Driver (BYOVD) attack. This breach enabled them to bypass Windows Memory Integrity, elevating their privileges and compromising sensitive data. The incident underscores alarming security vulnerabilities within antivirus software, raising concerns for users everywhere.

1 of 1

Story summary

Cybercriminals have taken advantage of weaknesses in CheckPoint's ZoneAlarm antivirus driver, vsdatant.sys, through a Bring Your Own Vulnerable Driver (BYOVD) attack. This breach enabled them to bypass Windows Memory Integrity, elevating their privileges and compromising sensitive data. The incident underscores alarming security vulnerabilities within antivirus software, raising concerns for users everywhere.