'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates

A newly discovered cyber technique, referred to as BigDiskBuster, can create a gap in virus detection without stopping Microsoft Defender from running. This technique does not require an exploit to work and allows for silent detection gaps while the service appears to be operating normally. It is described as a proof-of-concept and is not considered an endpoint detection and response killer. The method effectively blocks updates, leaving a vulnerability in place. The impact of BigDiskBuster is significant as it can evade detection without disrupting the normal functioning of Microsoft Defender. This technique highlights a potential weakness in Microsoft's security software.