BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

Diplomatic organizations in Central Asia have been targeted by a sophisticated new UEFI bootkit called BlackX that can bypass Secure Boot on patched Windows systems that are missing the latest revocations, The Hacker News reports. Kaspersky attributes the activity, which singled out entities in Tajikistan, Uzbekistan and Turkmenistan in early 2026, to the China-linked state-sponsored group APT41.