This Week in Security: In the Wild, Through Your NAT, and Brave

Most of the stories from this week are vulnerabilities dropped before fixes are available, many of them actively being exploited. Strap yourselves in!

Windows Kernel Crypto

The first is CVE-2020-17087, an issue in the Windows Kernel Cryptography Driver. The vulnerable system calls are accessible from unprivileged user-space, and potentially even …read more

Continue reading This Week in Security: In the Wild, Through Your NAT, and Brave

Microsoft Mistakenly Leaks Secure Boot Key

Microsoft inadvertently published a Secure Boot “golden key” policy that allows for self-signed or unsigned binaries to be loaded on Windows devices. Continue reading Microsoft Mistakenly Leaks Secure Boot Key