{"id":618839,"date":"2023-03-17T09:49:11","date_gmt":"2023-03-17T14:49:11","guid":{"rendered":"https:\/\/news.sellorbuyhomefast.com\/index.php\/2023\/03\/17\/microsoft-just-made-it-easier-to-patch-this-bitlocker-bypass-flaw-on-windows\/"},"modified":"2023-03-17T09:49:11","modified_gmt":"2023-03-17T14:49:11","slug":"microsoft-just-made-it-easier-to-patch-this-bitlocker-bypass-flaw-on-windows","status":"publish","type":"post","link":"https:\/\/newsycanuse.com\/index.php\/2023\/03\/17\/microsoft-just-made-it-easier-to-patch-this-bitlocker-bypass-flaw-on-windows\/","title":{"rendered":"Microsoft just made it easier to patch this Bitlocker bypass flaw on Windows"},"content":{"rendered":"<article aria-label=\"article\" data-id=\"qQ7Euv6v7TTceAwYv8LnU3\">\n<header>\n<nav aria-label=\"Breadcrumbs\">\n<ol>\n<li>\n<a href=\"https:\/\/www.techradar.com\" aria-label=\"Return to Home\">Home<\/a>\n<\/li>\n<li>\n<a href=\"https:\/\/www.techradar.com\/news\" aria-label=\"Return to News\">News<\/a>\n<\/li>\n<li>\n<a href=\"https:\/\/www.techradar.com\/computing\" aria-label=\"Return to Computing\">Computing<\/a>\n<\/li>\n<\/ol>\n<\/nav>\n<\/header>\n<section>\n<div itemprop=\"image\" itemscope itemtype=\"https:\/\/schema.org\/ImageObject\">\n<div>\n<picture><source type=\"image\/webp\" alt=\"Microsoft head quarters in France\" onerror=\"if(this.src &#038;&#038; this.src.indexOf('missing-image.svg') !== -1){return true;};this.parentNode.replaceChild(window.missingImage(),this)\"   data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/sGDMgLqhL4Lo5zkr6gobjL.jpg\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/sGDMgLqhL4Lo5zkr6gobjL.jpg\"><source type=\"image\/jpeg\" alt=\"Microsoft head quarters in France\" onerror=\"if(this.src &#038;&#038; this.src.indexOf('missing-image.svg') !== -1){return true;};this.parentNode.replaceChild(window.missingImage(),this)\"   data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/sGDMgLqhL4Lo5zkr6gobjL.jpg\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/sGDMgLqhL4Lo5zkr6gobjL.jpg\"><img decoding=\"async\" src=\"https:\/\/cdn.mos.cms.futurecdn.net\/sGDMgLqhL4Lo5zkr6gobjL-320-80.jpg\" alt=\"Microsoft head quarters in France\" onerror=\"if(this.src &#038;&#038; this.src.indexOf('missing-image.svg') !== -1){return true;};this.parentNode.replaceChild(window.missingImage(),this)\"   data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/sGDMgLqhL4Lo5zkr6gobjL.jpg\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/sGDMgLqhL4Lo5zkr6gobjL.jpg\"><\/picture>\n<\/div>\n<p><meta itemprop=\"url\" content=\"https:\/\/cdn.mos.cms.futurecdn.net\/sGDMgLqhL4Lo5zkr6gobjL.jpg\"><br \/>\n<meta itemprop=\"height\" content=\"600\"><br \/>\n<meta itemprop=\"width\" content=\"338\"><figcaption itemprop=\"caption description\">\n<span itemprop=\"copyrightHolder\">(Image credit: HJBC \/ Shutterstock)<\/span><br \/>\n<\/figcaption><\/div>\n<div id=\"article-body\">\n<p>Microsoft has published a Powershell script to help IT teams fix a BitLocker bypass security flaw found in the Windows Recovery Environment (WinRE), simplifying the process of securing WinRE images.\u00a0<\/p>\n<p>Per <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/microsoft-shares-script-to-fix-winre-bitlocker-bypass-flaw\/\" target=\"_blank\" data-url=\"https:\/\/www.bleepingcomputer.com\/news\/security\/microsoft-shares-script-to-fix-winre-bitlocker-bypass-flaw\/\" rel=\"noopener\">BleepingComputer<\/a><span> (opens in new tab)<\/span>, the flaw, tracked as CVE-2022-41099, allows threat actors to bypass the BitLocker Device Encryption feature, and gain access to <a href=\"https:\/\/www.techradar.com\/best\/best-encryption-software\" target=\"_blank\" rel=\"noopener\">encrypted data<\/a><span> (opens in new tab)<\/span> in low-complexity attacks.\u00a0<\/p>\n<p>The caveat is that the attackers need to have physical access to the target endpoints. Furthermore, if the user enabled BitLocker TPM and has PIN protection, the vulnerability cannot be exploited. That\u2019s why the flaw has a severity score of 4.6 &#8211; medium.<\/p>\n<h2 id=\"two-available-versions\">Two available versions<\/h2>\n<p>\u00a0&#8220;The sample PowerShell script was developed by the Microsoft product team to help automate the updating of WinRE images on Windows 10 and Windows 11 devices,&#8221; Microsoft said.\u00a0<\/p>\n<p>&#8220;Run the script with Administrator credentials in PowerShell on the affected devices. There are two scripts available\u2014which script you should use depends on the version of Windows you are running.&#8221;<\/p>\n<p>One script is for systems running on Windows 10 2004 and later (Windows 11 included), while the other is for Windows 10 1909 and earlier (it will still run on all Windows 10 and Windows 11 systems, the company added).<\/p>\n<p>The vulnerability was first discovered in November 2022. Back then, Microsoft added a fix to the November Patch Tuesday cumulative update, listing it as an \u201cimportant\u201d update, but not \u201ccritical\u201d.<\/p>\n<p>When running the script in Powershell, admins can choose a path and a name for the Safe OS Dynamic update package.\u00a0<\/p>\n<p>The packages are unique to the version of the OS being patched, as well as to the chip architecture. Therefore, IT teams need to download the right one from the Microsoft Update Catalog in advance.<\/p>\n<ul>\n<li>These are the <a href=\"https:\/\/www.techradar.com\/best\/best-malware-removal\" target=\"_blank\" rel=\"noopener\">best malware removal tools<\/a><span> (opens in new tab)<\/span> at the moment<\/li>\n<\/ul>\n<\/div>\n<div data-hydrate=\"true\" data-reactroot id=\"slice-container-newsletterForm-articleInbodyContent\">\n<section>\n<p>Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!<\/p>\n<\/section>\n<\/div>\n<div data-reactroot id=\"slice-container-authorBio\">\n<p>Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he\u2019s written for numerous media outlets, including Al Jazeera Balkans. He\u2019s also held several modules on content writing for Represent Communications.<\/p>\n<\/div>\n<\/section>\n<p><a href=\"https:\/\/www.techradar.com\/news\/microsoft-just-made-it-easier-to-patch-this-bitlocker-bypass-flaw-on-windows\" class=\"button purchase\" rel=\"nofollow noopener\" target=\"_blank\">Read More<\/a><br \/>\n Yuri Coby<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Home News Computing (Image credit: HJBC \/ Shutterstock) Microsoft has published a Powershell script to help IT teams fix a BitLocker bypass security flaw found in the Windows Recovery Environment (WinRE), simplifying the process of securing WinRE images.\u00a0Per BleepingComputer (opens in new tab), the flaw, tracked as CVE-2022-41099, allows threat actors to bypass the BitLocker<\/p>\n","protected":false},"author":1,"featured_media":618840,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4001,78,46],"tags":[],"class_list":["post-618839","post","type-post","status-publish","format-standard","has-post-thumbnail","category-easier","category-microsoft","category-technology"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/618839","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=618839"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/618839\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/618840"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=618839"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=618839"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=618839"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}