UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
5 Articles
5 Articles
Ars Technica
IT Security News - cybersecurity, infosecurity newsUEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
UEFI bootkit BlackX exploits Microsoft's lack of clarity around Secure Boot protections.
Although Windows 11 regularly receives security updates, new vulnerabilities are being discovered. This time, it's the BlackX bookit, which can bypass Secure Boot even on computers with the updates installed... Full version of the page: https://ithardware.pl/aktualnosci/windows_11_luka_bootkit_blackx_secure_boot-55770.html
An attack with the UEFI BlackX bootkit targeted organizations with up-to-date Windows systems, but Kaspersky reported that it managed to prevent it. Research focuses on the difference between installing patches and completing the mitigation of vulnerable certificates.
UEFI Bootkit Infects Fully Patched Windows PCs: Is Microsoft Responsible?
BlackLotus became the first publicly documented UEFI bootkit found in the wild that could bypass Secure Boot on fully updated Windows 11 systems. Although Microsoft had patched the underlying vulnerability in 2022 and issued additional updates in 2023 and 2024—including new certificates and a mechanism for revoking the certificates used to sign vulnerable boot managers—another [...]
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
