The source code for BlackLotus vulnerability leaked a few days ago, almost around the same time as Microsoft rolled out the second phase hardening of its secure boot flaw via Dynamic Windows updates.
Cve-2022-21894 RSS
Microsoft has published some helpful guidance against the BlackLotus UEFI bootkit vulnerability that can bypass Secure Boot, VBS, BitLocker, Windows Defender, and more to infect updated Windows PCs.
BlackLotus, which is a bootkit, has been doing the rounds on the internet since last year. This bootkit is capable of bypassing Secure Boot, disabling BitLocker, Microsoft Defender, and more.
