• MS-DEFCON 4: Skip those Secure Boot scripts

    alert banner

    ISSUE 20.21.1 • 2023-05-23


    By Susan Bradley

    Deploy May updates — and nothing but the updates.

    I’m lowering the MS-DEFCON level to 4 to encourage you to install the May updates now.

    However, I do not recommend taking the optional steps recommended by Microsoft to revoke the vulnerable bootloader files, as I discussed in yesterday’s On Security column. I do not think these manual steps provide full protection for this vulnerability — or potential future ones.

    Anyone can read the full MS-DEFCON Alert (20.21.1, 2023-05-23).