BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Jak se o tom psalo 2

1. 24. 10. 2026 16:17 · BleepingComputer US nadpis události

   BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

   A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast. [...]

2. 22. 10. 2026 08:00 · Securelist (Kaspersky) RU

   How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia

   Introduction Back in October 2022, Kaspersky GReAT was looking into a peculiar advertisement on a hacking forum. A cybercriminal had been advertising a UEFI bootkit, dubbed BlackLotus, that could bypass Secure Boot, for $5,000. Given the low price for such powerful capabilities, the cybersecurity community initially took this advertisement with a grain of salt. As no BlackLotus samples were found in the wild, no one could at the time verify the claims made in the forum post. BlackLotus…