🤖 BlackX, a new UEFI bootkit, defeats Secure Boot on fully patched Windows hosts that haven't applied DBX revocations. Kaspersky attributes the campaign against diplomatic entities in Tajikistan, Uzbekistan and Turkmenistan to APT41. Persistence sits in firmware, below the OS.
🔗 https://thehackernews.com/2026/10/blackx-uefi-bootkit-bypasses-secure.html
#UEFI #Malware #APT41 #CyberSec
The Hacker NewsBlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsBlackX bootkit exploits unrevoked Secure Boot binaries on Windows devices after attackers gain admin access to Central Asian diplomatic networks.