Vulnerabilitymedium
NSA Releases Guide to Mitigate BlackLotus Bootkit Infections
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-21894 | Secure Boot Security Feature Bypass Vulnerability | 4.4 | 7% |
From the original article
1 min read at infosecurity-magazine.com
The US National Security Agency ( NSA ) has released a comprehensive mitigation guide to address the BlackLotus malware. According to the document, BlackLotus exploits a boot loader flaw, known as “Baton Drop,” ( CVE-2022-21894 ) to take control of endpoints during the early phase of software boot. It shares similarities with the BootHole malware from 2020.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.