As cited
Copy frozen at (site build).
vulnerabilities
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
BlackX, a UEFI bootkit, infected fully patched Windows 11 systems despite Microsoft issuing multiple security updates between 2022 and 2024 to address the underlying vulnerability and revoke vulnerable boot manager certificates. The malware, related to the earlier BlackLotus bootkit, executes malicious code before Windows loads, bypassing Secure Boot and operational security defenses. Organizations running all available patches still fell victim, raising questions about the effectiveness of Microsoft's remediation strategy.
Why it matters: Windows users and defenders need to understand that standard patching may be insufficient against UEFI bootkits; investigate whether additional firmware-level protections or certificate management practices are required to prevent pre-OS compromise.
- Source published
- First seen by Cybersecurity Tracker