BlackX exposes the gap between Windows updates and boot revocations Researchers found a bootkit on patched Windows machines. Closing its persistence route requires verified Secure Boot revocations and recovery media that still boots.