BlackX bootkit infected fully patched Windows machines: is Microsoft to blame?
Ars Technica reports that a new UEFI bootkit tracked as BlackX infected Windows machines with all security patches installed, following BlackLotus. Microsoft had patched the flaw BlackLotus exploited in 2022 and issued additional certificate and revocation updates in 2023 and 2024; the victims had all of them.
