physical access

Microsoft’s advisory for CVE-2025-55682 describes a BitLocker vulnerability that allows an attacker with physical access to bypass a BitLocker security control by exploiting improper enforcement of a behavioral workflow during early boot or recovery, and administrators should treat the vendor...

Microsoft has confirmed a Windows BitLocker security feature bypass tracked as CVE-2025-55332, and the advisory — backed by third‑party aggregators — describes an issue that allows an attacker with physical access to influence BitLocker’s boot or recovery decision logic and bypass protections...

Microsoft’s security update guide lists CVE-2025-55330 as a Windows BitLocker security feature bypass that allows an attacker with physical access to circumvent BitLocker protections; Microsoft assigns a medium severity (CVSS v3.1 ≈ 6.1) and points administrators to vendor updates as the primary...

Microsoft’s advisory for CVE-2025-55333 names a new BitLocker security feature bypass that allows an attacker with physical access to the device to subvert BitLocker protections by taking advantage of an incomplete comparison in BitLocker logic — a weakness Microsoft classifies as a Security...

A newly republished advisory from CISA and Rockwell Automation raises urgent operational and security flags for organizations using the CompactLogix® 5480 controller family: the devices running specific Windows packages are affected by a Missing Authentication for Critical Function vulnerability...

Siemens RUGGEDCOM ROX II devices are the subject of a newly cataloged vulnerability — tracked as CVE-2025-40761 — that allows an attacker with physical access to the device’s serial interface to bypass authentication through the device’s Built-In-Self-Test (BIST) mode and obtain a root shell, a...

A critical vulnerability has struck at the heart of Windows security, putting BitLocker’s much-touted full-disk encryption under the microscope. Dubbed CVE-2025-48818, this flaw exposes millions of devices to the risk of unauthorized data access—not through high-tech remote exploits, but via a...

In the world of wireless industrial communications, not every threat can be launched from the dark corners of the internet. Sometimes, it takes a pair of boots, a bolt-cutter, and a deep knowledge of obscure file systems to crack open systems running the backbone of our critical infrastructure...

As my career in security response has grown over the years, I am often reminded of the words of Italian author Giuseppe Tomasi Di Lampedusa, who stated, “If we want everything to remain as it is, it will be necessary for everything to change.” There are some things that we wish to...