Are there any real examples (malware, rootkits, etc.) of exploiting the UEFI secure boot mechanism vulnerabilities such as CVE-2022-21894?
1 Answer
Just recently BlackLotus UEFI bootkit has been discovered which not only exploits this vulnerability, it does a ton more to gain persistence (complete system reinstallation will not help - you'll have to reset MOK keys and probably even reflash BIOS) it disables multiple Windows 11 protections to remain completely undetected.