The feed · Sunday 25 October

Security 2

Breaches, vulnerabilities and fixes

#1Security15h ago2 sources

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot in Central Asian diplomatic targets

A UEFI bootkit called BlackX, observed in early 2026, leveraged the Baton Drop vulnerability to bypass Secure Boot and load a malicious driver that interferes with Kaspersky and Avast security solutions. The campaign targeted diplomatic organizations in Tajikistan, Uzbekistan and Turkmenistan and is attributed to the China-linked APT41 group.

Why it matters: It demonstrates that even patched Windows systems can be compromised via firmware attacks, highlighting the need for robust supply‑chain and firmware security measures.

BleepingComputer + 1 more

#2Security20h ago2 sources

Eye Security disables vulnerable Time4Popcorn updater affecting millions of PCs

Researchers remotely disabled the updater in the abandoned Time4Popcorn app, a Popcorn Time fork, closing a flaw that could have let attackers execute code with elevated privileges on millions of computers. Between November 2025 and March 2026 the Dutch firm Eye Security pushed more than 2 million updates to devices it did not own to switch off the background updater that could have been used to take over machines.

Why it matters: Unpatched updaters can become entry points for botnets, posing a large-scale security risk for any organization’s endpoints.

BleepingComputer + 1 more

See older stories: Saturday 24 October →

Loading…