Skip to content
NewA calmer, faster ZeroHour
MalwarehighExploited in the wild

BlackLotus Malware Hijacks Windows Secure Boot Process

Schneier on Securityby Bruce Schneier ()2 min read3 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-21894
Secure Boot Security Feature Bypass Vulnerability
4.47%

From the original article

2 min read at schneier.com

Researchers have discovered malware that “can hijack a computer’s boot process even when Secure Boot and other advanced protections are enabled and running on fully updated versions of Windows.” Dubbed BlackLotus, the malware is what’s known as a UEFI bootkit.

Schneier on Security

By Bruce Schneier · schneier.com

Read the full article at Schneier on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.