Patch your Windows PC now before bootkit malware takes it over – here’s how

Screenshot: Microsoft – Cert CC: CVE-2025-3052 InsydeH2O Secure Boot Bypass. Article by Lance Whitney. ZDNet – June 11, 2025.

Windows users who don’t always install the updates rolled out by Microsoft each month for Patch Tuesday will want to install the ones for June. That’s because the latest round of patches fixes a flaw that could allow an attacker to control your PC through bootkit malware. Designated as CVE-2025-3052, the Secure Boot bypass flaw is a serious one, according to Binarly security researcher Alex Matrosov, who discovered the vulnerability. In a Binarly blog post published Tuesday, he described the problem as a memory corruption issue that exploits Microsoft’s Secure Boot. […]

Click here to view original web page at www.zdnet.com