BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

Reported by BleepingComputer (Bill Toulas)

Summary by Cyber Security News24 Oct 2026, 16:17 CET

About this summary. This is a short excerpt from the description that BleepingComputer published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.bleepingcomputer.com/news/security/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot — Image: BleepingComputer

A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast.

Read the full article at BleepingComputer →

Source attribution: headline and facts are from BleepingComputer (bleepingcomputer.com). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

How APT41 revived the BlackLotus bootkit to attack diplomatic organizations in Central Asia

Code-execution flaw in UEFI firmware threatens most servers on planet Earth

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

CVE-2026-102764: BeyondTrust Zero-Day Exploited

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers