NEW WINDOWS DRIVER SIGNATURE BYPASS ALLOWS KERNEL ROOTKIT INSTALLS

Summary from the TLDR InfoSec newsletter

Attackers can bypass Windows security features and install rootkits by downgrading kernel components. Outdated software components can be introduced on fully patched systems by exploiting the Windows Update process, making them susceptible to past vulnerabilities. Microsoft has dismissed the issue and the vulnerability remains unfixed, allowing for downgrade attacks and potential rootkit deployment.