← Today's brief

Security · Updated 24 Oct, 12:20 am IST

BlackX UEFI bootkit bypasses Secure Boot on patched Windows systems

Image: The Hacker News

Why it matters for readers: If you use Windows, this shows attackers can target firmware and why revocations and firmware integrity matter.

  • Kaspersky published a technical report detailing a UEFI bootkit named BlackX that can bypass Secure Boot on patched Windows systems missing revocations.1
  • The activity targeted diplomatic organizations in Tajikistan, Uzbekistan and Turkmenistan in early 2026.1
  • Kaspersky suspects the operation is linked to a China-associated state-sponsored group known as APT41.1

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started