The record
Written from the 1 report below. Nothing here is unsourced.
- A new proof-of-concept tool called BigDiskBuster blocks Microsoft Defender updates by filling all available disk space during the download process.
- The tool also prevents the update of the Windows Malicious Software Removal Tool by holding a file handle on its executable.
- There is currently no patch or Microsoft advisory available for this technique.
- Disabling automatic updates leaves systems with stale protection signatures, potentially increasing vulnerability to malware.
What to watch next
- Official Microsoft advisory or security patch release
- Independent confirmation of the exploit's effectiveness across Windows versions
- Detection of live exploitation in the wild
Who said what1
Only words found exactly in the article are shown, attributed and linked to the line they came from.
Abdelhamid Naceri
1 quote · 1 outlet
“a bit buggy and needs some rewritting”
In the article
…deletes the file and waits for the next attempt. It also opens a handle on MRT.exe, the Windows Malicious Software Removal Tool, in a way that would block Windows Update from replacing it. Naceri describes the tool as " a bit buggy and needs some rewritting " and says it seems to work on all supported Windows versions. No independent researcher has confirmed the claimed behavior. Naceri calls BigDiskBuster "similar to UnDefend," a Defender denial-of-service flaw he…
Coverage1
All filed from India
Named United States · Microsoft · Microsoft Defender · Windows · Abdelhamid Naceri · BigDiskBuster
The 1 report is listed beside the record.
Ask this story
Answers cite the reports above, or say they can't.