Newsletter Archives

• Apple backports fixes

  Posted on April 2, 2025 at 16:43 CDT by Susan Bradley • Comment in the Forums

  Apple released several updates on March 31, including several backports to older versions of iOS and iPadOS. These fixes retroactively addressed three actively exploited zero-day vulnerabilities affecting legacy versions of its operating systems.

  CVE-2025-24200: ” This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.”

  That means businesses, journalists, and other highly targeted individuals. It was originally patched on February 10 in iOS 18.3.1, iPadOS 18.3.1, and iPad 17.7.5, but the vulnerability remained unresolved in older operating systems until now.

  Another bug, CVE-2025-24201, was patched in iOS 16.7.11, iPadOS 16.7.11, iOS 15.8.4, and iPadOS 15.8.4 and is targeting flaws in WebKit and browsers. It’s been backported to iOS and iPadOS 15 and 16.

  For more information, see this post in our forums.

  Apple CVE-2025-24200, CVE-2025-24201, Patch Lady Posts

• Reviewing your licensing options

  Posted on March 31, 2025 at 02:45 CDT by Susan Bradley • Comment in the Forums

  

  ISSUE 22.13 • 2025-03-31

  TAME YOUR TECH

  

  By Susan Bradley

  Can you get a license for that?

  With the upcoming end of life of Windows 10, I’m often asked why I’m not recommending that you look for and install the long-term servicing channel (LTSC) version of Windows 10 or Windows 11.

  LTSC is a version of Windows 10 that was designed for devices that require minimal changes over time. It is primarily used in environments where stability and consistency are crucial, such as medical devices or industrial machinery. It is not available to the public and can be purchased only through volume licensing. It’s a platform that is intentionally not bloated, and it comes with fewer pre-installed apps, such as Microsoft Store, Cortana, and Edge (until the 2021 version). While it gets regular security updates, it does not get feature releases.

  Read the full story in our Plus Newsletter (22.13.0, 2025-03-31).
  This story also appears in our public Newsletter.

  Tame Your Tech Adobe, Autopilot, Business Software Alliance, Intune, Licensing, LTSC, Microsoft, Newsletters, Patch Lady Posts, Software, Windows 11

• Removing bypassnro

  Posted on March 28, 2025 at 15:00 CDT by Susan Bradley • Comment in the Forums

  We’re removing the bypassnro.cmd script from the build to enhance security and user experience of Windows 11. This change ensures that all users exit setup with internet connectivity and a Microsoft Account.

  Today, Microsoft announced that the Windows 11 Insider Build (26200.5516) had been released to the Dev channel. The nugget quoted above is mentioned in that Windows Blog post.

  What’s it about? “Bypass” refers to the methods we’ve used in the past to avoid using a Microsoft account when installing Windows Home edition. It’s being removed.

  Does this bother you? If so, it’s time to get into that feedback hub and make your voice heard. Unfortunately, you may not be able to do so, at least for the moment. Use this link, which will prompt you to open the Feedback Hub app on your PC and sign in. Microsoft may tell you that “Your account doesn’t have access to this feedback.” That happened to me on a 23H2 PC, but I was able to get there on a PC running 24H2.

  Update: Click on the social media post by Will Dormann and the resulting responses. They removed the built in command file, they did not remove the ability to bypass it. You can just type in the commands by hand and still get around the mandate for a Microsoft account.

  Windows 11 Dev Channel, KB5054687, Patch Lady Posts, Windows 11, Windows Insider Preview

• Where is Windows going?

  Posted on March 28, 2025 at 03:00 CDT by Susan Bradley • Comment in the Forums

  When Microsoft started down the road of continuous improvements, it resulted in constant change that can annoy everyone — from end users to IT administrators. When I’m asked, “What’s this,” I must see the desktop to know what the person is talking about. They’re obviously seeing it, but I may never have seen in on my PCs.

  Yesterday, in the Windows IT Pro blog, Microsoft announced its Windows Roadmap. It covers only Windows 11 23H2 and 24H2. It promises to show when something is in preview, whether it’s a slow rollout, or is in general release. It provides estimated dates.

  When that odd thing shows up, perhaps the Roadmap can help all of us figure out whether Windows was always like that, or the odd thing is new. I suppose we can hope.

  Windows 11 Microsoft, Patch Lady Posts, road map, Windows 11

• System Guard service error still won’t be fixed

  Posted on March 27, 2025 at 03:00 CDT by Susan Bradley • Comment in the Forums

  When the preview releases come out at the end of the month, they are a clue of nonsecurity fixes that will be included in the following month’s security patches. So, once again we turn to Windows 10 22H2’s preview update released on March 25 and find that in KB5053643, Microsoft is not prioritizing the fix for the event viewer problem — an error regarding SgrmBroker.exe. Stated reason: it’s a cosmetic issue.

  If you are seeing this error, you can safely ignore it. It is not a root cause for crashing PCs or blue screens of death. It’s one of many things one finds in the event viewer that are benign and can be ignored.

  This fix is clearly on a slow boat. Identified in January, not yet fixed, and no sign of it for April.

  Windows Security Event Viewer, Patch Lady Posts, Preview patches

• Third party add ins reminder

  Posted on March 26, 2025 at 06:00 CDT by Susan Bradley • Comment in the Forums

  One of the things that I plan to start adding as a reminder to my patching checklist/to-dos is to check your add-ins. From browser add ins to operating add-ins, all of these third-party tools mean you no longer have a bog-standard operating system and thus will always be needing to be a bit more careful before updating. Depending on what third party tool you are using make sure you check its version against whatever is the latest version on the site you originally downloaded it from.

  This is one of the reasons I stick with a limited number of add-ins and then get the ones that will check for updates. For example, I’m a fan of Fences that help you corral your icons on your desktop.

  Bottom line: don’t forget to update those first and THEN, update your operating system.

  Windows Patches/Security Patch Lady Posts

• MS-DEFCON 4: Mixed bag for March

  Posted on March 25, 2025 at 02:45 CDT by Susan Bradley • Comment in the Forums

  

  ISSUE 22.12.1 • 2025-03-25

  

  By Susan Bradley

  Although CISA has given businesses who follow its guidance until early April to install updates released in March, I’m urging you to do so now.

  Accordingly, I’m lowering the MS-DEFCON level to 4. You can find CISA’s deadlines in its Known Exploited Vulnerabilities Catalog.

  Note that my recommendations for businesses include some possible exceptions.

  Anyone can read the full MS-DEFCON Alert (22.12.1, 2025-03-25).

  AskWoody Plus Alert, MS-DEFCON Alerts, Chrome, Edge, Microsoft marketing, MS-DEFCON, MS-DEFCON 4, NVIDIA, OneDrive, Patch Lady Posts, RDP, Remote Desktop Connection, Windows 10 22H2, Windows Update

• Planning ahead for migration

  Posted on March 24, 2025 at 02:42 CDT by Susan Bradley • Comment in the Forums

  TAME YOUR TECH

  

  By Susan Bradley

  March 20, last Thursday, was the spring equinox. For me, that means I start planning ahead for gardening season.

  I’ll review seed catalogs and study how things worked out last year. Making a plan well ahead of turning that first bit of soil is essential for me, and I put it all on paper. From determining how much fertilizer and mulch I need to computing compost density and selecting the best seeds for this year, I want that plan.

  Okay, I know that as Will was editing this column, he was asking himself, “What the heck is she talking about? This is a tech newsletter!” I’ll explain.

  Read the full story in our Plus Newsletter (22.12.0, 2025-03-24).

  Tame Your Tech Apple, Business insurance, Cyber insurance, Linux, Migration, Mint, Newsletters, Patch Lady Posts, PC Upgrades, Windows 10, Windows 10 ESU, Windows 11
• « Older Entries

  Newer Entries »