Cyber Security News

Microsoft Warns of Windows 11 24H2 Issue that Blocks Windows Security Updates

Microsoft has issued a warning about a significant issue impacting devices running Windows 11, version 24H2, that could block essential Windows Security updates.

The problem arises when users install this version of the operating system using media—such as CDs or USB drives—containing either the October 2024 or November 2024 security updates.

If affected, devices may be left in a state where subsequent security updates cannot be applied, leaving the system vulnerable.

2024 MITRE ATT&CK Evaluation Results for SMEs & MSPs -> Download Free Guide

Details of the Issue

According to Microsoft’s official release, the issue is specific to installation media that integrates the October or November security patches (released between October 8, 2024, and November 12, 2024).

Devices utilizing the standard Windows Update process to install these security patches are unaffected. However, devices installed from flawed media may not receive critical future updates, compromising their security posture.

Affected Platforms

  • Client: Windows 11, version 24H2
  • Server: None

This issue does not extend to older versions of Windows or other platforms.

To mitigate the problem, Microsoft urges users and IT administrators not to install Windows 11, version 24H2, using installation media that includes October or November’s updates.

Instead, ensure that the installation media is updated to include the December 2024 monthly security update (released on December 10, 2024) or later. Users can also utilize the standard Windows Update mechanism, which does not encounter this issue.

For those who have already installed Windows 11, version 24H2 using the problematic media, Microsoft is actively working on a resolution but has yet to provide a detailed fix. Affected users should monitor Microsoft’s update page for further guidance.

This installation-related flaw joins a list of known issues affecting Windows 11, version 24H2.

Other reported problems include audio failures on devices with specific drivers, Auto HDR-related gaming glitches, and compatibility issues with third-party applications like Google Workspace Sync.

While most of these issues have either been mitigated or resolved, the current installation media problem poses a critical security risk that requires immediate attention.

Microsoft is collaborating with partners to resolve the issue and will provide updates as new fixes are developed.

Users are encouraged to check for OS updates regularly, follow Microsoft’s prescribed guidelines for creating installation media, and stay informed through official channels like the Windows Release Health page.

Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Attackers Exploit MCP RCE, Blind Prompt Injection and Memory Credential Theft Against AI Infrastructure

Attackers are increasingly treating AI infrastructure as a high-value cloud entry point, exploiting exposed Model…

2 hours ago

700 OpenAI Agents Coordinate Attack on Hugging Face and Gain Remote Code Execution

OpenAI’s ExploitGym evaluation environment reportedly became the site of a large-scale, unsanctioned multi-agent campaign after…

3 hours ago

Polymorphic Phishing Attack Generates Unique Credential-Stealing Page on Every Visit

A newly analyzed phishing operation is using server-side polymorphism to generate a distinct credential-harvesting page…

4 hours ago

Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover

A critical authentication bypass vulnerability has been identified in the WPMU DEV Dashboard WordPress plugin,…

4 hours ago

ServiceNow Patches Critical Flaws Enabling Unauthenticated RCE and SQL Injection

ServiceNow has issued security advisories for four vulnerabilities, including critical flaws in its AI platform.…

5 hours ago

Suspected Iran-Linked Cyberattack Knocks UK Power Plant Offline for Four Days

A cyber incident reportedly forced a small UK power generation facility offline for about four…

5 hours ago