Researchers discovered a significant flaw which allowed them to take full control of the process of Windows Update. This also allowed the creation of Windows Downdate, a tool that can be used for downgrading updates and bypassing all verification steps including Integrity Verification and Trusted Installer Enforcement.
Additionally, after the downgrading of Critical OS components was achieved including DLLs, drivers and the NT kernel, the OS reported that it was fully updated and was unable to install future updates. Moreover, the recovery and scanning tools were not able to detect the issues in the Operating System.
Further escalating this attack, the researchers successfully downgraded Credential Guard’s Isolated User Mode process, Secure Kernel, and Hyper-V’s hypervisor to expose past privilege escalation vulnerabilities.
This concludes the overview with the final discovery of multiple ways to disable Windows virtualization-based Security (VBS), including Credential Guard and Hypervisor-Protected Code integrity (HVCI), even when enforced with UEFI locks.
The result of this attack resulted in a fully patched Windows machine that is vulnerable to thousands of previous patched vulnerabilities, changing fixed vulnerabilities to zero-days and still making the Operating System to think that it is “fully patched”.
dotslashme@infosec.pub 3 months ago
Sweet, maybe I can roll back all the way to windows XP now /s
Chozo@fedia.io 3 months ago
I actually briefly used an XP machine a few months ago, for the first time in many years. It was weird, it felt like I was revisiting an old childhood home or something. Everything was right where I remembered it, everything worked the way I expected it to.
I kinda want to go back. We never realized how good we had it.
Exec@pawb.social 3 months ago
The only thing I miss from XP is the classic lock screen where it had your wallpaper and a login window in the air
westyvw@lemm.ee 3 months ago
I find it weird that people look back fondly on XP. I remember at the time thinking it looked like crap, had an interface that looked like shit, and was extremely easy to compromise.
I guess Rose colored glasses for some people…