BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

[Starburst-David]

Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX.

The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report published this week.

Full article can be found at:
https://thehackernews.com/2026/10/black ... ecure.html

Published Date: Oct 23, 2026

Vulnerabilities has been mentioned in this article:
CVE-2022-21894