Microsoft fixes Windows Autopatch bug installing restricted drivers

Summary

Microsoft has addressed a bug in Windows Autopatch that led to the installation of restricted driver updates on certain EU devices. This issue occurred when policies meant to prevent specific driver installations were bypassed by the Autopatch service.

IFF Assessment

FOE

This is bad news for defenders as a bug in a widely used patching system allowed the installation of potentially restricted or undesirable drivers, bypassing intended security controls.

Defender Context

This incident highlights the importance of verifying patching mechanisms and understanding how automated update services interact with administrative policies. Defenders should monitor for unexpected driver installations, especially in controlled environments, and ensure their patching solutions are configured to adhere strictly to security baselines.

Read Full Story →