On 17 August researchers published a chain that ends up writing to Android kernel memory from the modem, with no patch and with the chip maker not answering. What made us stop was not the exploit but the patch date on the phones they tested it with: Android can carry two patch levels in a month, the second one is what covers the modem, and the phone only shows you one.
On 24 and 27 June, two of the certificates Microsoft has used to sign the boot chain since 2011 expired. Not a single machine went down: Microsoft states plainly that the device keeps starting and updating normally. What stops is something else — revocations, the boot manager, early-boot mitigations — and it raises no alert at all. A third date is still open: 19 October. How to check in two minutes whether your Windows estate, your Linux servers and — this is the one nobody looks at — your virtual machines already carry the 2023 certificates.
To receive IT stories, everyWAN news and exclusive subscriber offers, sign up to our mailing list
Microsoft 365
ES 
CAT 
EN