CYBER CODE RED

Get real-time updates on Telegram

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast.

Published 24-Oct-2026 17:07 UTC · First seen 24-Oct-2026 17:06 UTC

Sources