Iranian Hackers Leveraging BitLocker and DiskCryptor in Ransomware Attacks

A ransomware group with an Iranian operational connection has been linked to a string of file-encrypting malware attacks targeting organizations in Israel, the U.S., Europe, and Australia. Cybersecurity firm Secureworks attributed the intrusions to a threat actor it tracks under the moniker Cobal...

CVE-2022-29127

BitLocker Security Feature Bypass Vulnerability...

CVE-2022-29127

BitLocker Security Feature Bypass Vulnerability...

CVE-2022-29127

BitLocker Security Feature Bypass Vulnerability...

Security feature bypass

BitLocker Security Feature Bypass Vulnerability...

CVE-2022-29127

Technical details (affected product/component/versions/root cause/impact/fix) are not publicly provided in the supplied documents. Monitor for updates from the connected sources; these materials do not allow confirmation of vulnerability specifics or remediation actions.

CVE-2022-29127 BitLocker Security Feature Bypass Vulnerability

...

BitLocker Security Feature Bypass Vulnerability

...

Microsoft Windows BitLocker 安全特征问题漏洞

Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. A security feature issue vulnerability exists in Microsoft Windows BitLocker. The following products and editions are affected:Windows 10 Version 21H1 for...

April 12, 2022—KB5012670 (Monthly Rollup)

None None...

March 22, 2022—KB5011551 (OS Build 17763.2746) Preview

None None...

The vulnerability of the BitLocker data protection function of the Microsoft Windows operating system, which allows a hacker to bypass the authentication process

The vulnerability of the BitLocker data protection function in the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass the authentication process...

March 8, 2022—KB5011495 (OS Build 14393.5006) - EXPIRED

None None...

KB5011569: Servicing stack update for Windows 10: March 8, 2022

None None...

KB5011571: Servicing stack update for Windows Server 2012: March 8, 2022

KB5011571: Servicing stack update for Windows Server 2012: March 8, 2022 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that...

KB5011570: Servicing stack update for Windows 10, version 1607 and Server 2016: March 8, 2022

None None...

February 15, 2022—KB5010427 (OS Build 17763.2628) Preview

None None...

January 11, 2022—KB5009545 (OS Build 18363.2037)

None None...

PT-2022-15180

Name of the Vulnerable Software and Affected Versions Microsoft Windows 11 affected versions not specified Description A security feature bypass allows attackers to circumvent Secure Boot, enabling the installation of UEFI bootkits such as BlackLotus. This issue is exploited by deploying vulnerab...

Exchange, Fortinet Flaws Being Exploited by Iranian APT, CISA Warns

A state-backed Iranian threat actor has been using multiple CVEs – including both serious Fortinet vulnerabilities for months and a Microsoft Exchange ProxyShell weakness for weeks – looking to gain a foothold within networks before moving laterally and launching BitLocker ransomware and other...