UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?

BlackX, a new UEFI bootkit related to the 2023 BlackLotus malware, successfully infected Windows systems that had all available security patches installed. BlackLotus originally bypassed Secure Boot on fully updated Windows 11 machines by exploiting a vulnerability patched in 2022, and Microsoft subsequently issued additional updates. The fact that BlackX variants penetrated fully patched systems raises questions about the effectiveness of current mitigation strategies.

Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. Ars Technica did the reporting; read the original for the full story.