Windows 10: say ur device may be vulnerable and cloud deliverey too saying.windows 10 pro...

hdajdhajdhawjhdjwhdwjadhhhhhhhhhhjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj

:)

 

KB5012170 - Clarification - Check Script Still Says Vulnerable

Looking to see if anyone has some clarification on the BOOTHOLE vulnerability remediation:

• Test Box: Windows 10 Pro 22H2 - 19045.4046
  

Microsoft release KB5012170 in order to close this vulnerability. I've tried installing the MSU, but it says it's already installed. I can also detect it on my test box with Powershell:

• https://support.microsoft.com/en-us...boot-dbx-72ff5eed-25b4-47c7-be28-c42bd211bb15
  

However, looking at the advisory, Microsoft recommends running a check via Powershell. My test system returns TRUE, so expect the system is still vulnerable:

• Security Update Guide - Microsoft Security Response Center
  

Am I missing something? Do I still need to go through the manual application as described in this article, or does the 5012170 protect the system regardless?

• Microsoft guidance for applying Secure Boot DBX update (KB4575994) - Microsoft Support
  

If anyone has any helpful information on this it would be helpful. I'm likely missing something obvious, but I want to make sure we are protected on this one.

Thanks!

Rick

 

"Nadella (MS) says" brainstorm

This is the super typical manager craptalk that means nothing and makes no sense. They must attend courses to learn to say this stuff.

 

WPA2 Vulnerability Found

A small update with regards to the Microsoft fix. The fix itself is sufficient to solve the issue on Windows, even if your WiFi device has no driver update, with one caveat:

Does this security update fully address these vulnerabilities on Microsoft Platforms, or do I need to perform any additional steps to be fully protected?
The provided security updates address the reported vulnerabilities; however, when affected Windows based systems enter a connected standby mode in low power situations, the vulnerable functionality may be offloaded to installed Wi-Fi hardware. To fully address potential vulnerabilities, you are also encouraged to contact your Wi-Fi hardware vendor to obtain updated device drivers. For a listing of affected vendors with links to their documentation, review the ICASI Multi-Vendor Vulnerability Disclosure statement here: ICASI integrates into FIRST PSIRT SIG bolstering the incident response and security team industry

Source: Security Update Guide - Microsoft Security Response Center