https://redmondmag.com/articles/2019/10/22/micrososft-secured-core-pcs.aspx

Microsoft and its hardware partners on Monday described new “Secured-core” PCs, which add protections against firmware-based attacks.  Secured-core PCs combine hardware and software protections to ensure that so-called “bootkits” or “rootkits” don’t compromise a system at the boot-up stage. Such malware typically doesn’t get detected by anti-virus solutions.