A weekly security roundup brings together a heavy Patch Tuesday, a warning-sign around Secure Boot, a malware item labeled Milk, and renewed attention on Windows device identifiers.
A persistent Windows identifier is said to have helped connect an alleged Scattered Spider figure to a May 2025 retail intrusion, showing how ordinary system metadata can become powerful evidence.
A criminal complaint tied a suspect to alleged intrusions through Microsoft-held device records, showing how endpoint telemetry, cloud logs, and time stamps can become powerful attribution evidence.
A persistent Microsoft device identifier, paired with VPN and cloud records, became one of the key correlation points in a complaint tied to Scattered Spider.