It's official: BlackLotus malware can bypass secure boot

BlackLotus, a UEFI bootkit that's sold on hacking forums for about $5,000, can now bypass Secure Boot, making it the first known malware to run on Windows systems even with the firmware security feature enabled.Secure Boot is supposed to prevent devices from running unauthorized software on Microsoft machines.

Read at Theregister