The National Security Agency (NSA) is warning of a known vulnerability in the Microsoft Windows secure startup process that malicious actors could use to bypass Secure Boot protection and execute BlackLotus malware.
https://www.securitymagazine.com/articles/99571-security-leaders-discuss-nsa-guide-to-mitigate-blacklotus-threat