[WHOA] - This 'Unpatch Attack' Is A New One To Me!
ID: ec8676b5-6f34-5668-b429-177c4b1b6bc8
STIX ID: report--ec8676b5-6f34-5668-b429-177c4b1b6bc8
Feed Name: KnowBe4 Blog
Threat Score
At Black Hat 2024 SafeBreach researcher Alon Leviev demonstrated the "Windows Downdate" exploit that uses CVE-2024-38202 and CVE-2024-21302 to downgrade fully updated Windows 10/11 and Server systems, bypass Credential Guard and VBS, and reintroduce previously patched vulnerabilities; the flaws were reported to Microsoft six months ago but remain unpatched, with vendor-recommended mitigations advised until a fix is issued.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.