A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast. [...] Weiterlesen: BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
Intelligence View
⚡ tsecurity.de Intelligence
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
46 sources
CVE-2026-64305 | Linux Kernel up to 6.12.95/6.18.38/7.1.3 qat use after free
45 more sources
VVulDB Updates3 hours agoCVE-2026-68258 | Linux Kernel up to 6.18.41/7.1.5/7.2-rc2 drm-amdkfd mqd_size_from_queue_type memory corruption VVulDB Updates3 hours agoCVE-2026-68273 | Linux Kernel up to 6.12.102/6.18.43/7.1.5 amdgpu amdgpu_ctx_init use after free (Nessus ID 339550) VVulDB Updates7 hours agoCVE-2026-63966 | Linux Kernel up to 6.18.34/7.0.11 Iio Imu Adis16550 adis16550_trigger_handler missing initialization VVulDB Updates7 hours agoCVE-2026-63959 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Tcpm Tcpci Maxim stack-based overflow VVulDB Updates7 hours agoCVE-2026-63964 | Linux Kernel Ucsi Ccg Driver do_flash null pointer dereference VVulDB Updates7 hours agoCVE-2026-63965 | Linux Kernel up to 6.18.34/7.0.11 Bmp280 Pressure Driver bmp280-core.c bmp580_trigger_handler information disclosure
+39
29 sources
CVE-2026-106195 | Google Chrome up to 154.0.8037.97 Chromoting access control (WID-SEC-2026-3761)
28 more sources
VVulDB Updates1 hour agoCVE-2026-106197 | Google Chrome up to 154.0.8037.97 Browser use after free (WID-SEC-2026-3761) VVulDB Updates1 hour agoCVE-2026-106196 | Google Chrome up to 154.0.8037.97 Navigation improper authorization (WID-SEC-2026-3761) VVulDB Updates1 hour agoCVE-2026-106198 | Google Chrome up to 154.0.8037.97 FileSystem improper authorization (WID-SEC-2026-3761) VVulDB Updates1 hour agoCVE-2026-106199 | Google Chrome up to 154.0.8037.97 Actor improper authorization (WID-SEC-2026-3761) VVulDB Updates1 hour agoCVE-2026-106201 | Google Chrome up to 154.0.8037.97 race condition (WID-SEC-2026-3761) VVulDB Updates1 hour agoCVE-2026-106200 | Google Chrome up to 154.0.8037.97 Track use after free (WID-SEC-2026-3761)
+22
16 sources
Security: Mehrere Probleme in rust-gst-plugin-reqwest (Fedora)
15 more sources
PPro-Linux1 hour agoSecurity: Mehrere Probleme in rust-cargo-rpmstatus (Fedora) PPro-Linux1 hour agoSecurity: Mehrere Probleme in atuin (Fedora) PPro-Linux1 hour agoSecurity: Mehrere Probleme in clevis (Fedora) PPro-Linux Security1 hour agoMehrere Probleme in rust-cargo-deny (Fedora) PPro-Linux Security1 hour agoMehrere Probleme in rust-resctl-bench (Fedora) PPro-Linux Security1 hour agoMehrere Probleme in rust-cargo-rpmstatus (Fedora)
+9
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4294928/vulnerabilities-cve/blackx-uefi-bootkit-exploits-baton-drop-flaw-to-bypass-secure-boot/