A security flaw in Windows Update, Downdate, makes it possible to downgrade the version of the operating system which thus finds itself at the mercy of vulnerabilities and hackers.
At the latest Black Hat security conference in Las Vegas, researcher Alon Leviev at SafeBreach Labs revealed a Windows Update security flawthe update functionality of Windows operating systems.
Bearing the name Downgradethis flaw is used by the small Open Source application “ Windows Downdate ».
The vulnerability it exploits downgrade Windows version.
In this case, Windows 10, Windows 11 and Windows Server are affected.
When this is the case, we therefore end up with an old version of Windows Who does not have the latest fixes in terms of security.
Result hackers can then attack the system.
The risk is even greater that according to its designer, Windows Downdate is undetectable.
And once infected, the laptop or desktop PC mentions that the system is up to date sous Windows Update… although this is clearly not the case.
The Redmond firm spoke on the subject:
Microsoft is currently developing a security update to mitigate this threat, but it is not yet available.
On this page Microsoft gives advice on how to protect yourself against Windows Downdate.
But they are complex to set up for the majority of users.
Source : Microsoft and SafeBreach
