BlackX UEFI Bootkit Exploits Unpatched Baton Drop Flaw to Bypass Secure Boot in Espionage Campaign
A UEFI bootkit named BlackX, attributed with medium confidence to Chinese state-sponsored group APT41, exploited the Baton Drop vulnerability to bypass Secure Boot on fully patched Windows systems in a 2026 espionage campaign targeting Central Asian diplomatic agencies.