ISSUE 23.31.1 • 2026-08-06 By Susan Bradley The upcoming August updates include several promised fixes for Windows Search. The August updates will include several fixes, a few of which specifically target Search. I anticipate that the August updates will also bring a bumper crop of other vulnerabilities being patched, so I’m raising the MS-DEFCON level […]

ISSUE 23.30.1 • 2026-07-28 By Susan Bradley • Comment about this alert Today, I want to tell you that I’m less worried about the side effects of this month’s security updates from Windows, Apple, and Linux distros. I’m more concerned about security in the AI industry in general. July saw the first side effects of […]

ISSUE 23.27.1 • 2026-07-09 By Susan Bradley As a result of researchers’ using AI to do more in-depth code reviews of operating systems and applications, expect to see more security updates and more vulnerability counts. As Apple indicated to Reuters, the recent release of Apple security updates was done in an accelerated fashion because “… […]

ISSUE 23.25.1 • 2026-06-23 By Susan Bradley Tomorrow is the drop-dead date. Tomorrow, June 24, 2026, the Microsoft Corporation KEK CA 2011 certificate will expire. But your computer will still boot. Life will go on. The sun will rise. On June 27, 2026, the second certificate will expire for the Microsoft UEFI CA 2011 certificate. […]

ISSUE 23.22.1 • 2026-06-04 By Susan Bradley Microsoft is starting to roll out its much-promised, dribbled fixes. Included in the upcoming June updates — and already included in the preview updates released on May 26, 2026 — KB5089573 includes the Secure Boot fixes and the beginning of many changes about which you’ve complained. Nonetheless, it’s […]

ISSUE 23.21.1 • 2026-05-25 By Susan Bradley Microsoft is slowly but surely starting to roll out Secure Boot security fixes to more and more machines. I’m therefore lowering the MS-DEFCON level to 4. The May updates include not only the Secure Boot fixes but also a variety of other security-related patches. Start by installing KB5089549 […]

ISSUE 23.18.1 • 2026-05-07 By Susan Bradley It’s time to prepare for the May updates, which includes pausing and deferring them. That’s why the MS-DEFCON level is going to 2. There may be some confusion about the recent changes to the level. You’ll recall that I changed the level to 4 on April 28 and […]

ISSUE 23.17.2 • 2026-04-29 By Susan Bradley This is a trending story. On the same day I sent out an MS-DEFCON Alert recommending installing the April updates, Ira Shapiro alerts us to issues with backup software. I’m not seeing this with all backup software, but some vendors have mentioned the matter in various forums. The […]

ISSUE 23.17.1 • 2026-04-28 By Susan Bradley The April updates continue to dribble out more fixes for Secure Boot certificates for some systems. But once you receive the April updates, you still may be waiting for the new certs to be installed. That happened to me on some systems. Nonetheless, the patching world is relatively […]

Mike Felch // Meet ‘The Box’ Bomb For the last few years at the security conference DEF CON in Las Vegas, the Tamper Resistant Village has hosted a challenging contest called […]

The post Defusing a Bomb Through Trigger Bypasses and Sensors appeared first on Black Hills Information Security, Inc..