Ransomware operators are no longer trying to evade detection. They are disabling endpoint defenses at the kernel level before attacks even begin, changing how security teams need to think about control and visibility.

This shift matters because many security strategies assume tools will stay active long enough to respond. At the same time, law enforcement is exposing how ransomware depends on large-scale identity fraud to turn crypto into cash. Together, these trends point to two pressure points: kernel access and identity assurance.

In this episode, we cover the GentleKiller EDR takedown approach, the AudiA6 laundering network, Malaysia's push toward national digital identity, and a Bluetooth flaw that turns everyday devices into potential listening points.

Learn more at https://crestvale.io

Support the show