From Ars Technica

UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?

UEFI bootkit BlackX exploits Microsoft's lack of clarity around Secure Boot protections.

Read the full report at Ars Technica ↗