How to prevent ransomware exploiting safe mode + network reboot to bypass anti-malware tools
A new attack mode for ransomware is to force a user's system to reboot in "safemode + networking" which allows malware to be installed and never captured by anti-malware tools.