GoKawiilBlackX UEFI bootkit bypasses Secure Boot on fully patched Windows systems
Researchers identified a new UEFI bootkit, tracked as BlackX, that infected Windows machines even though they had installed all of Microsoft's patches addressing the 2023 BlackLotus bootkit. Like BlackLotus, BlackX exploits a flaw called 'Baton Drop' in the Windows boot manager to bypass Secure Boot and run malicious code before the operating system and its security defenses fully load.