vulnerability
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
HighCVSS 4.4ExploitedEPSS 7%
Summary
A sophisticated UEFI bootkit called BlackX, linked to the Chinese state-sponsored threat group APT41, is targeting diplomatic organizations in Central Asia. Attackers are leveraging this vulnerability by dropping malicious drivers and payloads designed to interfere with endpoint security and conduct cyber espionage, and the source code of BlackLotus has never entered the public domain.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
