ESET researchers have discovered a vulnerability, affecting the majority of UEFI-based systems, that allows actors to bypass UEFI Secure Boot. This vulnerability, assigned CVE-2024-7344, was found in a UEFI application signed by Microsoft’s “Microsoft Corporation
ESET announced its participation in the upcoming RSA Conference in San Francisco from May 6–9, 2024. At the event, ESET Malware Researcher Martin Smolár will present critical vulnerabilities and long-lasting problems in Unified Extensible Firmware Interface (UEFI) security, which resulted in the discovery of the BlackLotus UEFI bootkit.
ESET researchers are the first to publish an analysis of a UEFI bootkit that is capable of bypassing an essential platform security feature – UEFI Secure Boot. The functionality of the bootkit and its individual features make ESET Research believe that it is a threat known as BlackLotus,
