NSA Releases Guide to Combat BlackLotus Malware

Malicious cyber actors might exploit a known flaw in Microsoft Windows’ secure startup process to bypass Secure Boot protection and run the BlackLotus malware. BlackLotus uses a known flaw dubbed “Baton Drop,” tracked as CVE-2022-21894, to bypass beyond security precautions made by the device’s Secure Boot start-up procedure.  Since October 2022, BlackLotus has been making appearances on hacker forums. […]

The post NSA Releases Guide to Combat BlackLotus Malware appeared first on GBHackers - Latest Cyber Security News | Hacker …

beyond blacklotus boot bypass cve cve-2022-21894 cyber cyber-attack device exploit flaw guide malicious malware microsoft microsoft windows nsa october procedure process protection ransomware releases run secure boot security start start-up startup windows