conv.

← The whole story
Security
New UEFI bootkit BlackX bypasses Secure Boot on fully patched Windows

BlackX bootkit found infecting fully patched Windows systems

Ars Technica reports that organizations infected by a new bootkit tracked as BlackX had installed all of Microsoft's prior patches and certificate updates, yet BlackX still bypassed Secure Boot via the same Baton Drop flaw, reopening the question of whether Microsoft's unclear implementation is to blame.

BlackX bootkit found infecting fully patched Windows systems
arstechnica.com

“UEFI bootkit BlackX exploits Microsoft's lack of clarity around Secure Boot protections.”

Ars Technica

Microsoft Windows and Secure Boot vendorBlackLotus Precedent UEFI bootkit (2023)BlackX Newly identified UEFI bootkit

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 6 pieces in two hours at Nov 3, 10 AM; 13 pieces over 5 days (4 articles · 9 posts) Nov 3, 10 AM — 6 pieces · 4 articles · 2 posts — Mastodon 3, Google News 2, Newswires 1Nov 3, 12 PM — quietNov 3, 2 PM — 1 piece · 1 post — Mastodon 1Nov 3, 4 PM — 1 piece · 1 post — Bluesky 1Nov 3, 6 PM — quietNov 3, 8 PM — quietNov 3, 10 PM — 1 piece · 1 post — Bluesky 1Nov 4, 12 AM — quietNov 4, 2 AM — quietNov 4, 4 AM — quietNov 4, 6 AM — quietNov 4, 8 AM — quietNov 4, 10 AM — 1 piece · 1 post — Bluesky 1Nov 4, 12 PM — 1 piece · 1 post — Bluesky 1Nov 4, 2 PM — quietNov 4, 4 PM — quietNov 4, 6 PM — quietNov 4, 8 PM — quietNov 4, 10 PM — quietNov 5, 12 AM — quietNov 5, 2 AM — 1 piece · 1 post — Mastodon 1Nov 5, 4 AM — quietNov 5, 6 AM — quietNov 5, 8 AM — quietNov 5, 10 AM — quietNov 5, 12 PM — quietNov 5, 2 PM — quietNov 5, 4 PM — quietNov 5, 6 PM — quietNov 5, 8 PM — quietNov 5, 10 PM — quietNov 6, 12 AM — quietNov 6, 2 AM — 1 piece · 1 post — Bluesky 1Nov 6, 4 AM — quietNov 6, 6 AM — quietNov 6, 8 AM — quietNov 6, 10 AM — quietNov 6, 12 PM — quietNov 6, 2 PM — quietNov 6, 4 PM — quietNov 6, 6 PM — quietNov 6, 8 PM — quietNov 6, 10 PM — quietYesterday, 12 AM — quietYesterday, 2 AM — quietYesterday, 4 AM — quietYesterday, 6 AM — quietYesterday, 8 AM — quietYesterday, 10 AM — quietYesterday, 12 PM — quietYesterday, 2 PM — quietYesterday, 4 PM — quietYesterday, 6 PM — quietYesterday, 8 PM — quietYesterday, 10 PM — quietToday, 12 AM — quietToday, 2 AM — quietToday, 4 AM — quietToday, 6 AM — quietToday, 8 AM — quiet 1–2
Nov 4Nov 5Nov 6yesterdaynow · 10:51 AM ET

What was reported 2 claims about this development

  1. first by Mastodon, 4d ago · also Ars Technica

  2. first by UA.NEWS, 4d ago

All 2 developments of New UEFI bootkit BlackX bypasses Secure Boot on fully… →

MastodonNewswiresGoogle NewsBluesky