Secure Boot is one of those foundational security features that most of us expect to “just work”. And for the most part, it does—until it doesn’t. With the upcoming Secure Boot certificate […]
Secure Boot is one of those foundational security features that most of us expect to “just work”. And for the most part, it does—until it doesn’t. With the upcoming Secure Boot certificate […]
Update! In my recent post, https://deploymentbunny.com/2026/04/07/secure-boot-2026-essential-updates-and-fixes/, I referenced the CheckSecureBoot script used to validate Secure Boot configuration during deployment. The purpose of the script is to be able to check the satus […]
I had the opportunity to present on The PAW Survival Guide: Deploying Secure Admin Workstations in Real Environments at MMS, and if you attended, here is a recap of the session we […]
I had the opportunity to present on Windows Operating System Hardening at MMS togather with Michael Niehaus , and if you attended, here is a recap of the session we did. This […]
Knowing what to secure on Windows clients is rarely the problem.Knowing the actual state of a device, and proving it usually is. To help with that, I maintain a small PowerShell‑based toolkit […]
When IT, OT, and IoT Collide As IT, OT, and IoT converge, the security landscape fundamentally changes. Environments that were once more or less isolated are suddenly connected, legacy systems meet modern […]
The PK/KEK Reality Check and Fix! What is the issue? Secure Boot won’t ‘turn off’ in 2026. Most systems will keep booting, but devices that don’t transition from the 2011 trust anchors […]
Introduction Cyberattacks happens every day, all year long, and it hits organizations randomly, big, huge, small, tiny, and it hurts. I work with recovery, meaning I help out to restore the them […]