‘BigDiskBuster’ Leaves Microsoft Defender Running While Blocking Updates

A proof-of-concept technique dubbed BigDiskBuster creates a silent gap in virus detection while Microsoft Defender appears to run normally — no exploit required, Dark Reading reports. It’s not quite an EDR-killer, but it shows how updates can be quietly blocked while the service looks healthy.