A week in security (July 22 – July 28)

Last week on Malwarebytes Labs: Meta takes down 63,000 sextortion-related accounts on Instagram Windows update may present users with a BitLocker recovery screen TracFone will pay $16 million to settle FCC data breach investigation Google admits it can’t quite quit third-party cookies Heritage...

Windows update may present users with a BitLocker recovery screen

Some Windows users may see a BitLocker Recovery screen after applying the Microsoft patch Tuesday updates. BitLocker is a Windows security feature that encrypts entire drives. It prevents someone that has obtained a stolen or lost device from reading the files stored on that drive. Unfortunately,...

BitLocker Privilege Escalation

The vulnerability of the BitLocker data protection function in Windows operating systems is related to a breach of the data protection mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and gain access to encrypted data...

CVE-2024-38058

BitLocker Security Feature Bypass Vulnerability...

CVE-2024-38058

BitLocker Security Feature Bypass Vulnerability...

CVE-2024-38058 BitLocker Security Feature Bypass Vulnerability

...

CVE-2024-38058 BitLocker Security Feature Bypass Vulnerability

...

CVE-2024-38058

CVE-2024-38058 is tied to BitLocker: Microsoft security updates (KB5040430, KB5040431, KB5040437, etc.) add PCRs 4–7 and 11 to the default Secure Boot validation profile. This is described as a BitLocker-related change with CVE-2024-38058 referenced for the PCR extension in multiple OS updates. T...

BitLocker Security Feature Bypass Vulnerability

...

Microsoft Windows BitLocker Security Vulnerability

Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. A security vulnerability exists in Microsoft Windows BitLocker. An attacker exploiting this vulnerability could bypass certain features. The following produc...

PT-2024-4733 · Microsoft · Windows Bitlocker +1

Name of the Vulnerable Software and Affected Versions: Windows BitLocker affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the BitLocker data protection function of Windows operating systems. This vulnerability can be exploited by an...

CVE-2024-38058: Protection Mechanism Failure

BitLocker Security Feature Bypass Vulnerability...

ShrinkLocker: Ransomware Exploits BitLocker for Drive Encryption

...

ShrinkLocker: Turning BitLocker into ransomware

Introduction Attackers always find creative ways to bypass defensive features and accomplish their goals. This can be done with packers, crypters, and code obfuscation. However, one of the best ways of evading detection, as well as maximizing compatibility, is to use the operating systems own...

BitLocker Data Protection Bypass

The vulnerability of BitLocker’s data protection function in the Microsoft Windows operating system is related to a breach of the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

April’s Patch Tuesday Brings Record Number of Fixes

If only Patch Tuesdays came around infrequently -- like total solar eclipse rare -- instead of just creeping up on us each month like The Man in the Moon. Although to be fair, it would be tough for Microsoft to eclipse the number of vulnerabilities fixed in this months patch batch -- a record 147...

CVE-2024-20665

BitLocker Security Feature Bypass Vulnerability...

CVE-2024-20665

BitLocker Security Feature Bypass Vulnerability...

CVE-2024-20665 BitLocker Security Feature Bypass Vulnerability

...

CVE-2024-20665

CVE-2024-20665 is described as a BitLocker Security Feature Bypass vulnerability. Per the NVD entry, the exploit requires local access (AV: Local) with high privileges (PR: High) and no user interaction (UI: None), with a impact profile of high in confidentiality, integrity, and availability, and...