BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot defenses
Discovered in an espionage campaign during early 2026, the BlackX UEFI bootkit exploited the Baton Drop vulnerability to circumvent Secure Boot protections, loading a malicious driver that disrupts security software from companies like Kaspersky and Avast.
Why it matters
This attack highlights critical risks in firmware-level security, showing that legacy vulnerabilities can be leveraged to undermine modern defenses and target endpoint security solutions at a foundational level.
Discussion
Loading discussion…
Log in to vote. Verified members can join the discussion.