Baton Drop News Today

The source code for BlackLotus vulnerability leaked a few days ago, almost around the same time as Microsoft rolled out the second phase hardening of its secure boot flaw via Dynamic Windows updates.

It's unclear why the NSA issued in-depth mitigation guidance for the software boot threat now, but orgs should take steps to harden their environments.

The National Security Agency has released mitigation advice for locking down Windows and Linux environments against powerful BlackLotus malware, warning

Microsoft has published some helpful guidance against the BlackLotus UEFI bootkit vulnerability that can bypass Secure Boot, VBS, BitLocker, Windows Defender, and more to infect updated Windows PCs.