Microsoft has released a fix for a Secure Boot bypass vulnerability that had allowed hackers to deploy the BlackLotus bootkit to target endpoints. However, the update will remain unused on computers for months as its application is quite complicated. The original vulnerability, tracked as CVE-2022-21894, was patched in early 2023. But hackers quickly found workarounds, which led to the release of CVE-2023-24932 earlier this week.
