Acronis Cyberthreats Update, October 2025

Acronis TRU describes a proof-of-concept named **EDR‑Freeze** that leverages Windows Error Reporting (WER) to suspend security products by causing a protected WER process to call MiniDumpWriteDump and then halting it, leaving target EDR/AV threads frozen; the technique was demonstrated on Windows 11 (including Microsoft Defender) but Acronis EDR is reported immune. The update also summarizes September malware detection metrics and emphasizes monitoring WER activity and using Acronis protections.