Compromised by BlackLotus? – Week in security with Tony Anscombe

Microsoft has released guidance on how organizations can detect BlackLotus, a powerful threat that was first analyzed by ESET researchers. BlackLotus is a UEFI bootkit that is capable of operating on Windows systems even with UEFI Secure Boot enabled, giving them full control over Windows's boot process all while disabling various OS security mechanisms. What exactly should organizations look for in order to determine if their systems had been compromised by this powerful malware? Find out in Tony's video.

Connecting …

blacklotus boot bootkit compromised control detect eset find guidance malware microsoft order organizations process researchers secure boot security systems threat uefi uefi bootkit video week in security windows