highMalware
BlackX UEFI Bootkit Exploits Baton Drop Flaw to Bypass Secure Boot
A UEFI bootkit named BlackX, attributed to an espionage actor and deployed in a global campaign in early 2026, exploited the Baton Drop vulnerability to bypass Secure Boot and load a malicious driver. The driver is designed to interfere with security solutions from Kaspersky and Avast, enabling persistence at the firmware level and potential full system compromise.
BleepingComputer1 min read
