Skip to content
theregister·

🚨Security Researcher Unveils BigDiskBuster, Halts Defender Updates

Windows Defender Update Blocker Emerges

TL;DR

A security researcher released BigDiskBuster, a tool that prevents Microsoft Defender from installing updates by consuming free disk space. This could leave systems vulnerable to new threats. The tool's impact on Windows Defender's effectiveness is significant.

A security researcher has released BigDiskBuster, a proof-of-concept tool that blocks Microsoft Defender from installing updates by filling up disk space. This leaves systems potentially vulnerable to new threats. The tool works by creating hidden temporary files to consume free space, preventing the update process from completing. It also opens the Malicious Software Removal Tool (MRT.exe) in a way that restricts other processes' access to the file. BigDiskBuster is designed to work on all supported Windows versions, though its effectiveness is not yet verified. This could be a significant issue for systems relying on real-time protection against emerging threats. The researcher's actions are part of a public dispute with Microsoft over its vulnerability disclosure process.

Security Researcher Unveils BigDiskBuster, Halts Defender Updates — theregister

Key Points

1

BigDiskBuster blocks Microsoft Defender updates by filling disk space with hidden files.

2

The tool also restricts access to MRT.exe, further preventing updates.

3

BigDiskBuster is designed to work on all supported Windows versions, though verification is pending.

4

The researcher has released several Windows exploits, including RoguePlanet and LegacyHive.

5

Microsoft has criticized the researcher for releasing vulnerabilities without giving it a chance to fix them first.

Why It Matters

If you're running Windows Defender, BigDiskBuster could leave your system vulnerable to new threats by preventing updates. This is especially concerning for systems that rely on real-time protection against emerging malware. The ongoing dispute between the researcher and Microsoft over disclosure practices could impact future vulnerability management.

windows-defendersecurity-researchvulnerability-managementmicrosoftzero-day

Comments

Subscribe to join the conversation...

Be the first to comment

Enjoyed this article?

Get it daily. 7am. Free. Reads in 5 minutes.

Join 3,489 builders reading daily.

Also get