16 matches found
BlackLotus
BlackLotus BlackLotus aka CVE-2023-24932 remediation scripts for Intune, ConfigMgr, and generic ad-hoc use. Blog post: https://ajf.one/blacklotus General Notes These remediation scripts do NOT initiate any reboots. These are designed to be run "over time", and eventually the device will report as...
secure-boot-cert-servicing
Secure Boot Certificate Rollover — assessment and servicing A single, self-contained PowerShell script that assesses a Windows machine's Secure Boot certificate posture for the 2011 → 2023 rollover CVE-2023-24932 / KB5025885 and, only when you explicitly ask it to, opts that machine in to the...
Orchestrated-Powershell-for-CVE-2023-24932-en
Secure Boot Mitigation Orchestrator Script Overview This PowerShell script automates the Secure Boot mitigation steps for CVE-2023-24932 , as outlined in the Microsoft Security Guidance. It handles the entire process, including registry updates, reboots, and event log validation, to ensure your...
Orchestrated-Powershell-for-CVE-2023-24932
Orquestador de Secure Boot CVE-2023-24932 Automatiza toda la mitigación de Secure Boot para CVE-2023-24932 BlackLotus. Gestiona todos los cambios de registro, reinicios y verificación automáticamente. Requisitos Windows 10/11 o Server 2016+ Privilegios de administrador Secure Boot habilitado...
Support Statement regarding Microsoft CVE-2023-24932
Challenge Microsoft recently released update KB5025885 containing changes to secure boot. These changes require specific actions to be taken to continue using Veeam Agent for Microsoft Windows bare metal recovery media and other restore operations. After applying the Microsoft Update with...
SUSE CVE-2023-24932
unknown...
Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero-Day Bugs
Microsoft has rolled out Patch Tuesday updates for May 2023 to address 38 security flaws, including two zero-day bugs that it said are being actively exploited in the wild. Trend Micro's Zero Day Initiative ZDI said the volume is the lowest since August 2021, although it pointed out that "this...
Update now! May 2023 Patch Tuesday tackles three zero-days
Its that time of the month again: We're looking at May's Patch Tuesday roundup. Microsoft has released its monthly update, and while the total number of patched vulnerabilities is relatively low at 38, among them are three zero-day vulnerabilities. Microsoft classifies a vulnerability as a zero-d...
CVE-2023-24932
Secure Boot Security Feature Bypass Vulnerability...
CVE-2023-24932
Secure Boot Security Feature Bypass Vulnerability...
CVE-2023-24932
CVE-2023-24932 is a Secure Boot bypass vulnerability. It involves a Microsoft-signed UEFI application using the IhisiParamBuffer NVRAM variable to bypass Security2 verification, potentially allowing execution of unsigned binaries during early boot. Affected components include DT Research’s DtBios...
CVE-2023-24932 に関連するセキュア ブート マネージャーの変更に関するガイダンス
本ブログは、Guidance related to Secure Boot Manager changes associated with CVE-2023-24932 の抄訳版です。最新の情報は原文を参照してください。 概要...
Guidance related to Secure Boot Manager changes associated with CVE-2023-24932
Summary Today, Microsoft is releasing CVE-2023-24932, and associated configuration guidance, to address a Secure Boot bypass vulnerability used by the BlackLotus bootkit to exploit CVE-2022-21894. Customers will need to closely follow the configuration guidance to fully protect against this...
Guidance related to Secure Boot Manager changes associated with CVE-2023-24932
Summary Summary Today, Microsoft is releasing CVE-2023-24932, and associated configuration guidance, to address a Secure Boot bypass vulnerability used by the BlackLotus bootkit to exploit CVE-2022-21894. Customers will need to closely follow the configuration guidance to fully protect against th...
CVE-2023-24932
creationtimestamp| type| source ---|---|--- 2023-05-09 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2023/05/guidance-related-to-secure-boot-manager-changes-associated-with-cve-2023-24932/ 2023-05-09 22:12:11+00:00| exploited| https://t.me/ctinow/110762 2023-05-09 22:39:11+00:00| seen|...
