For years, one of the simplest rules in IT security has been to keep systems patched.

Install the updates. Reboot when required. Make sure Windows Update is current. Move on.

That advice still holds true, but a new Windows bootkit called BlackX is a reminder that “fully patched” doesn’t always mean fully protected. [Read more…]