# 💻 Your Windows Updates Can All Be Downgraded, Says Security Researcher

**URL:** <https://onehack.st/t/your-windows-updates-can-all-be-downgraded-says-security-researcher/288554>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [August 8, 2024, 6:05am UTC](https://onehack.st/t/your-windows-updates-can-all-be-downgraded-says-security-researcher/288554 "2024-08-08T06:05:58Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [August 8, 2024, 6:05am UTC](https://onehack.st/t/your-windows-updates-can-all-be-downgraded-says-security-researcher/288554/1 "2024-08-08T06:05:58Z")

</div>

**Summary:**

**1. New Downgrade Attack on Windows Updates:**

- SafeBreach researchers have discovered a Windows downgrade attack that can bypass secure boot processes, similar to last year’s BlackLotus UEFI bootkit.

**2. Exploiting the Update Process:**

- Researcher Alon Leviev found a way to control Windows updates, allowing manipulation of update contents, registry keys, and installers, all while bypassing integrity verifications.

**3. Broad Impact on Windows Security:**

- The vulnerability also compromises the Windows virtualization stack, including virtualization-based security features meant to isolate the kernel, posing a severe security threat.

**Read more at:** [The Register](https://www.theregister.com)