An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking. [...]
Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt
Summary + source link. No paywalls, no tracking.