Applying the fix for a new security bypass zero-day affecting the Windows Secure Boot feature will be a long process that will drag into 2024, but for good reason, says Microsoft.
BleepingComputer reports that threat actors have been exploiting a zero-day vulnerability in the Windows Common Log File System, tracked as CVE-2023-28252 which Microsoft has already addressed as part of this month's Patch Tuesday to facilitate new attacks distributing Nokoyawa ransomware payloads.