16 matches found
BlackLotus
BlackLotus BlackLotus（又名 CVE-2023-24932 修复脚本）适用于 Intune、ConfigMgr 以及通用的临时使用。 博客文章：https://ajf.one/blacklotus 常规说明 这些修复脚本不会触发任何重启。它们被设计为“随时间推移”运行，设备最终会通过“自然”重启（无论是每月更新、用户主动重启还是其他原因）报告为符合要求。 对于 Intune 修复和 ConfigMgr CI 使用，整个修复脚本必须放置在检测脚本中。这是因为这些脚本的运行方式类似于“选择你自己的冒险”故事，具有多个退出点，每个退出点都会返回自己的输出。...
secure-boot-cert-servicing
安全启动证书轮换——评估与服务 一个独立的 PowerShell 脚本，用于评估 Windows 机器的安全启动证书状况，以应对 2011 → 2023 证书轮换（CVE-2023-24932 / KB5025885），并且仅当您明确要求时，才会将该机器注册到 Microsoft 服务管道中。 由 Exchange Technology Services 为自行管理端点的客户和合作伙伴发布。 简要说明 Microsoft 于 2011 年颁发的安全启动证书即将到期，并将被 2023 版本取代。 证书| 日期| 存储| 角色 ---|---|---|--- Microsoft...
Orchestrated-Powershell-for-CVE-2023-24932
Secure Boot Orchestrator CVE-2023-24932 Automates the full Secure Boot mitigation for CVE-2023-24932 BlackLotus. Handles all registry changes, reboots, and verification automatically. Requirements Windows 10/11 or Server 2016+ Administrator privileges Secure Boot enabled Cumulative Update = July...
Orchestrated-Powershell-for-CVE-2023-24932-en
安全启动缓解编排脚本 概述 此 PowerShell 脚本可自动执行 CVE-2023-24932 的安全启动缓解步骤，如 Microsoft 安全指南 所述。它处理整个过程，包括注册表更新、重启和事件日志验证，以确保您的系统免受 BlackLotus UEFI 启动套件的侵害。 功能 完全自动编排 ：脚本引导您完成每个步骤，包括多次重启，并在每次重启后自动恢复。 事件日志验证 ：检查特定事件 ID（例如 1799、1037）以确认更新成功。 BitLocker 感知 ：如果 BitLocker 处于活动状态，则会发出警告，并确保您拥有恢复密钥。 硬件兼容性检查...
Support Statement regarding Microsoft CVE-2023-24932
Challenge Microsoft recently released update KB5025885 containing changes to secure boot. These changes require specific actions to be taken to continue using Veeam Agent for Microsoft Windows bare metal recovery media and other restore operations. After applying the Microsoft Update with...
SUSE CVE-2023-24932
unknown...
Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero-Day Bugs
Microsoft has rolled out Patch Tuesday updates for May 2023 to address 38 security flaws, including two zero-day bugs that it said are being actively exploited in the wild. Trend Micro's Zero Day Initiative ZDI said the volume is the lowest since August 2021, although it pointed out that "this...
Update now! May 2023 Patch Tuesday tackles three zero-days
Its that time of the month again: We're looking at May's Patch Tuesday roundup. Microsoft has released its monthly update, and while the total number of patched vulnerabilities is relatively low at 38, among them are three zero-day vulnerabilities. Microsoft classifies a vulnerability as a zero-d...
CVE-2023-24932
Secure Boot Security Feature Bypass Vulnerability...
CVE-2023-24932
Secure Boot Security Feature Bypass Vulnerability...
CVE-2023-24932
CVE-2023-24932 is a Secure Boot bypass vulnerability. It involves a Microsoft-signed UEFI application using the IhisiParamBuffer NVRAM variable to bypass Security2 verification, potentially allowing execution of unsigned binaries during early boot. Affected components include DT Research’s DtBios...
CVE-2023-24932 に関連するセキュア ブート マネージャーの変更に関するガイダンス
本ブログは、Guidance related to Secure Boot Manager changes associated with CVE-2023-24932 の抄訳版です。最新の情報は原文を参照してください。 概要...
Guidance related to Secure Boot Manager changes associated with CVE-2023-24932
Summary Today, Microsoft is releasing CVE-2023-24932, and associated configuration guidance, to address a Secure Boot bypass vulnerability used by the BlackLotus bootkit to exploit CVE-2022-21894. Customers will need to closely follow the configuration guidance to fully protect against this...
Guidance related to Secure Boot Manager changes associated with CVE-2023-24932
Summary Summary Today, Microsoft is releasing CVE-2023-24932, and associated configuration guidance, to address a Secure Boot bypass vulnerability used by the BlackLotus bootkit to exploit CVE-2022-21894. Customers will need to closely follow the configuration guidance to fully protect against th...
CVE-2023-24932
creationtimestamp| type| source ---|---|--- 2023-05-09 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2023/05/guidance-related-to-secure-boot-manager-changes-associated-with-cve-2023-24932/ 2023-05-09 22:12:11+00:00| exploited| https://t.me/ctinow/110762 2023-05-09 22:39:11+00:00| seen|...
