August Updates Broke Windows Reset and Recovery Functions

Red Dog Security

21 Aug 2025 — 1 min read

Microsoft has acknowledged that the August security updates for Windows are disrupting the reset and recovery functions on Windows 10 and older versions of Windows 11.

“After installing the August security update for Windows on any of the client versions mentioned below in the ‘Affected Platforms’ section, attempts to reset or recover a device may fail,” the company warned in a statement.

What’s Affected

The bug prevents users from reinstalling the system through the “Reset this PC” feature, which typically allows a reinstall while preserving personal files. It also disrupts recovery via the Windows Update troubleshooting tool, which normally keeps files, applications, and settings intact.

In addition, the problem extends to RemoteWipe CSP, a feature often used by IT administrators to remotely reset managed devices.

According to Microsoft, the issue impacts only client platforms after installing the following updates:

Windows 11 23H2 and 22H2 (KB5063875)
Windows 10 22H2, Windows 10 Enterprise LTSC 2021, Windows 10 IoT Enterprise LTSC 2021 (KB5063709)
Windows 10 Enterprise LTSC 2019, Windows 10 IoT Enterprise LTSC 2019 (KB5063877))

Fix in Progress

Microsoft stated that engineers are already working on a fix. A corrective patch will be released as an out-of-band update for all affected platforms in the coming days.

Context

This latest issue comes just a week after Microsoft resolved another bug tied to the August security updates. That earlier problem caused update installations to fail with error code 0x80240069 when updates were delivered via Windows Server Update Services (WSUS). The error appeared specifically after applying update KB5063878 for Windows 11 24H2.

Positive Technologies Analyzes the Toolset of APT Group Goffee

Specialists at Positive Technologies have revealed details of a previously undocumented toolset used by the hacker group Goffee (also known as Paper Werewolf). According to the researchers, these tools were deployed in the later stages of attacks, enabling the group to maintain long-term persistence inside victim networks while avoiding detection.

Flipper Developers Deny Existence of “Secret Firmware” for Hacking Cars

The issue of car theft using the Flipper Zero has resurfaced in global headlines. This time, hackers claim to be selling a “secret firmware” for the device that allegedly works against cars from Ford, Audi, Volkswagen, Subaru, Hyundai, Kia, and several other manufacturers. The developers behind Flipper Zero say these

RapperBot Botnet Dismantled, Creator Charged

The U.S. Department of Justice has charged the alleged developer and administrator of the RapperBot botnet, a Mirai-based network rented out to cybercriminals for large-scale DDoS attacks. The botnet itself was seized by law enforcement in early August during Operation PowerOff. Origins and Evolution RapperBot—also known as Eleven

PyPI Combats Attacks Based on Domain Reclaiming

The developers of the Python Package Index (PyPI) have announced new measures to combat domain reclaiming attacks—an overlooked threat that allows malicious actors to hijack user accounts through password resets. As the official repository for Python packages, PyPI is a critical resource for software developers, project maintainers, and companies