BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

First reported by Cyber Security News at · Updated · 2 sources

Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report

Covered by 2 publishers within 7 hours of the first report.

Summary from The Hacker News.

Reporting2

Cyber Security News Hackers Use New BlackX Bootkit to Bypass Windows Secure Boot on Fully Patched Systems · Tushar Subhra Dutta
The Hacker News BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations · info@thehackernews.com (The Hacker News)