UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Ars Technica's Dan Goodin reports that the UEFI bootkit BlackX, documented by Kaspersky, infected fully patched Windows machines by exploiting the "Baton Drop" Secure Boot bypass (CVE-2022-21894).