Security · Updated 24 Oct, 12:20 am IST
BlackX UEFI bootkit bypasses Secure Boot on patched Windows systems

Why it matters for readers: If you use Windows, this shows attackers can target firmware and why revocations and firmware integrity matter.
- Kaspersky published a technical report detailing a UEFI bootkit named BlackX that can bypass Secure Boot on patched Windows systems missing revocations.1
- The activity targeted diplomatic organizations in Tajikistan, Uzbekistan and Turkmenistan in early 2026.1
- Kaspersky suspects the operation is linked to a China-associated state-sponsored group known as APT41.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started