BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
A new UEFI bootkit called BlackX was deployed in early 2026 targeting security infrastructure. The malware leveraged the known Baton Drop flaw to circumvent Secure Boot protections and load a malicious driver capable of interfering with popular antivirus software. The campaign demonstrates active exploitation of older vulnerabilities for sophisticated evasion.
Key points
- BlackX UEFI bootkit exploits Baton Drop vulnerability
- Bypasses Secure Boot to load malicious driver
- Targets Kaspersky and Avast security solutions
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
