UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
MentionsMicrosoftMicrosoft Windows
In 2023, malware tracked as BlackLotus became the first publicly documented in-the-wild UEFI bootkit capable of bypassing Secure Boot on fully updated Windows 11 systems. With the industry-wide chain-of-trust mechanism subverted, the malware was able to run malicious code before Windows was fully loaded and many security defenses were operational.
Summary from Ars Technica Security.
Explained
The technology and terms in this story. Learn more