Technology

37720 readers

478 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago

MODERATORS

alyaza@beehaw.org

TheRtRevKaiser@beehaw.org

gyrfalcon@beehaw.org

rs5th@beehaw.org

SemioticStandard@beehaw.org

TheRtRevKaiser@kbin.social

Los@beehaw.org

coldredlight@beehaw.org

remington@beehaw.org

Windows Zero-day Flaw Let Hackers Downgrade Fully Updated Systems to Old Vulnerabilities (cybersecuritynews.com)

submitted 3 months ago by tardigrada@beehaw.org to c/technology@beehaw.org

9 comments fedilink hide all child comments

Archived version

Researchers discovered a significant flaw which allowed them to take full control of the process of Windows Update. This also allowed the creation of Windows Downdate, a tool that can be used for downgrading updates and bypassing all verification steps including Integrity Verification and Trusted Installer Enforcement.

Additionally, after the downgrading of Critical OS components was achieved including DLLs, drivers and the NT kernel, the OS reported that it was fully updated and was unable to install future updates. Moreover, the recovery and scanning tools were not able to detect the issues in the Operating System.

Further escalating this attack, the researchers successfully downgraded Credential Guard’s Isolated User Mode process, Secure Kernel, and Hyper-V’s hypervisor to expose past privilege escalation vulnerabilities.

This concludes the overview with the final discovery of multiple ways to disable Windows virtualization-based Security (VBS), including Credential Guard and Hypervisor-Protected Code integrity (HVCI), even when enforced with UEFI locks.

The result of this attack resulted in a fully patched Windows machine that is vulnerable to thousands of previous patched vulnerabilities, changing fixed vulnerabilities to zero-days and still making the Operating System to think that it is “fully patched”.

you are viewing a single comment's thread
view the rest of the comments

[–] westyvw@lemm.ee 1 points 3 months ago

My current environment - and one for many years, is just like you describe. No ads, instant launch (either from a launcher, or just type what I want and it pops up). No spyware, no account, no assistant. I even have a modern file manager that windows STILL hasn't surpassed.

But I remember at the time when XP came out, Windows 2000 already was all those things, Beos was all those things, Macs were all those things.

Without the nasty (and limited) XP colors and theme, the 10 minute exploits, the huge waste of space in all the dialogs, and the beginning of the Pro vs Home licensing, where they started with the bullshit of home has: only 1 processor, no remote desktop, no 64 bit, they even removed windows backup!

You could exploit and gain admin in a Windows XP machine right to the end, it could not be locked down if a user sat at it. Which, I know, if you have access to the machine usually all bets are off, but for a multi user machine it was less than acceptable.