# UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?

https://mins.news/en/item/127496

- Ars Technica, 2026-11-03 16:03 UTC
- Tech
- Original: https://arstechnica.com/security/2026/11/uefi-bootkit-infected-fully-patched-windows-machines-is-microsoft-to-blame/

> BlackX, a UEFI bootkit, infected organizations that had installed Microsoft’s relevant security updates. Its predecessor BlackLotus could bypass Secure Boot and run malicious code before Windows fully loaded. Microsoft had patched the exploited flaw and later issued updates to distrust vulnerable older boot managers.