Share story
Security

BlackX bootkit infected Windows systems with security patches installed

A stylized skull and crossbones made out of ones and zeroes. Image: Primary
A bootkit called BlackX infected organizations that had installed Microsoft's fixes and subsequent security updates for a Windows boot-manager vulnerability, Ars Technica reported. The malware exploits CVE-2022-21894, known as Baton Drop, to bypass Secure Boot, the signature checks intended to prevent unauthorized software from running as a computer starts. Microsoft fixed the flaw in 2022. Updates in 2023 and 2024 added a new certificate and a means to revoke trust in the certificate signing older vulnerable boot managers. The infected organizations had installed those updates. The vulnerability can also allow extraction of BitLocker encryption keys under certain conditions.
Sources
Ars Technica
In this story
Microsoft
Published by Tech & Business, a media brand covering technology and business. This story was sourced from Ars Technica and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital AI
Capital AI

October venture funding reaches $59 billion, with 66% going to AI

Global venture funding totaled $59 billion in October, up 45% from a year earlier, according to Crunchbase data. AI-driven companies captured 66% of the total, while seven companies raising billion-dollar rounds accounted for just over 40%.

Crunchbase News
Infrastructure
Infrastructure

Energy Transfer commits to $1.6 billion Louisiana-Mississippi gas pipeline

Energy Transfer LP has formally committed to building a $1.6 billion natural-gas pipeline, Bloomberg reports. The pipeline will move fuel from eastern Louisiana across Mississippi as data centers and export terminals increase demand for natural gas.

Bloomberg Technology
Capital Products
Capital Products

Journify raises $12 million to expand advertising data platform

Journify announced a $12 million Series A led by Al Mada Ventures and co-led by returning investor Silicon Badia. The company says the funding will support expansion into the US and Europe and develop the AI behind its advertising data platform.

The Next Web