Microsoft left a kernel-level, zero-day bug in Windows for six months before patching it
Hackers exploited the issue to spread an extremely stealthy rootkit
BlackLotus, the new UEFI rootkit that makes security researchers worry
Why it matters: "BlackLotus" is being offered on underground forums as an all-powerful firmware rootkit, capable of surviving any removal effort and bypassing the most advanced Windows protections. If actual malware samples can prove the offer is real, of course.
For years, some Gigabyte and Asus motherboards carried UEFI malware
The CosmicStrand rootkit is the latest indication that UEFI malware may be more common than previously thought
ESET has discovered the first UEFI rootkit in the wild
Persistence that can survive most hardware upgrades
