Skip to content

A Critical Deadline Is Approaching for Windows and Linux Security

7.4 relevance
Score Breakdown
technical depth
7
novelty
8
actionability
7
community
8
strategic
7
personal
8

Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.

Critical boot security key expiration deadline, highly actionable and technically deep for sysadmins.

Security wired.com
A Critical Deadline Is Approaching for Windows and Linux Security
Summary

Three Microsoft-signed certificates underpinning Secure Boot for Windows and Linux expire on June 24, breaking the cryptographic chain of trust that verifies firmware and bootloader integrity against UEFI bootkits like LoJax and MosaicRegressor. Without updates, systems become vulnerable to bootkits that load before the OS and antimalware, surviving reinstallation and reinfecting disinfected systems. Administrators must deploy updated certificates via firmware updates or OS patches before the deadline to maintain Secure Boot protection.

Author

Dan Goodin, Ars Technica

More from Dan Goodin, Ars Technica →