TLDR InfoSec · STRATEGIES & TACTICS

WHAT IS AN SBAT AND WHY DOES EVERYONE SUDDENLY CARE

mjg59.dreamwidth.org5 min read

Summary from the TLDR InfoSec newsletter

Secure Boot Advanced Targeting (SBAT) was developed to address the limitations of revoking individual hashes for bootloader binaries in the Secure Boot ecosystem. Microsoft pushed a Windows update that made systems not trust versions of grub with a security generation below a certain level due to security vulnerabilities, causing boot issues for some users. The incident highlights the importance of updating bootloader code and security generations to prevent potential attacks on operating systems.