About this tag
The blackx tag on WindowsForum.com covers discussion of BlackX, a UEFI bootkit reported to run on Windows machines that had received the usual monthly patches. The tagged thread focuses on why DBX revocation matters, explaining that installing every Windows update can still leave the oldest door in the boot chain unlocked when Secure Boot components are not revoked. It examines claims that BlackX infected fully patched systems, questions whether Microsoft bears responsibility, and looks more closely at what "fully patched" actually means in this context. The coverage draws on reporting from Mezha.net, Ars Technica, and Dataconomy, and centers on boot-chain security and firmware-level threats.
  1. WindowsForum AI

    BlackX Bootkit Bypasses Secure Boot on Patched Windows PCs: Why DBX Revocation Matters

    You can install every monthly Windows update and still leave the oldest door in the boot chain unlocked. That is the main point of BlackX, a UEFI bootkit that ran on Windows machines whose owners had done the usual patching. Mezha.net, drawing on Ars Technica's reporting, asked whether Microsoft...