Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known... Weiterlesen: BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems M…
Intelligence View
⚡ tsecurity.de Intelligence
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
29 Quellen
CVE-2026-90154 | Linux Kernel ksmbd ksmbd_all_conn_set_status race condition (WID-SEC-2026-3444)
28 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-90155 | Linux Kernel up to 7.2.5 ksmbd __ksmbd_close_fd flc_blocked_requests use after free (WID-SEC-2026-3444) VVulDB Updatesvor 2 Std.CVE-2026-90156 | Linux Kernel up to 7.2.5 ksmbd vfs_lock_file conn null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 2 Std.CVE-2026-90159 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 BPF _bpf_setsockopt/_bpf_getsockopt race condition (WID-SEC-2026-3444) VVulDB Updatesvor 2 Std.CVE-2026-90158 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 nfcon nfcon_device deadlock (WID-SEC-2026-3444) VVulDB Updatesvor 2 Std.CVE-2026-90161 | Linux Kernel up to 6.18.51/7.2.5 erofs out-of-bounds (WID-SEC-2026-3444) VVulDB Updatesvor 2 Std.CVE-2026-90162 | Linux Kernel up to 7.2.5 ksmbd smb2_lock use after free (WID-SEC-2026-3444)
+22
23 Quellen
CVE-2025-67526 | ThimPress Sailing Plugin up to 4.4.6 on WordPress php file inclusion
22 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2025-66532 | Mikado-Themes Powerlift Plugin up to 3.2.1 on WordPress authorization VVulDB Updatesvor 5 Std.CVE-2025-67531 | trippleS Turitor Plugin up to 1.5.3 on WordPress php file inclusion VVulDB Updatesvor 5 Std.CVE-2025-67529 | Opal_WP Fashion Plugin up to 5.3.0 on WordPress php file inclusion VVulDB Updatesvor 5 Std.CVE-2025-67527 | trippleS Digiqole Plugin up to 2.2.7 on WordPress php file inclusion VVulDB Updatesvor 5 Std.CVE-2025-67525 | Opal_WP ekommart Plugin up to 4.3.1 on WordPress php file inclusion VVulDB Updatesvor 5 Std.CVE-2025-67521 | Select-Themes Select Core Plugin up to 2.6 on WordPress php file inclusion
+16
14 Quellen
CVE-2026-106062 | GIMP DDS Loader out-of-bounds write (EUVD-2026-93983 / Nessus ID 371935)
13 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2022-47881 | Foxit PDF Reader/PDF Editor up to 11.2.1.53537 out-of-bounds (EUVD-2022-50638) VVulDB Updatesvor 3 Std.CVE-2022-47940 | Linux Kernel up to 5.18.17 ksmbd fs/ksmbd/smb2pdu.c smb2_write information disclosure (EUVD-2022-50673 / Nessus ID 249854) VVulDB Updatesvor 3 Std.CVE-2026-108127 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100446) VVulDB Updatesvor 3 Std.CVE-2026-97844 | Microsoft Windows up to Server 2025 out-of-bounds (EUVD-2026-100445) VVulDB Updatesvor 3 Std.CVE-2026-97842 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100443) VVulDB Updatesvor 3 Std.CVE-2026-97843 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100444)
+7
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4293452/it-security-nachrichten/blackx-uefi-bootkit-bypasses-secure-boot-on-patched-windows-systems-missing-revocations/