APT41 BlackX UEFI bootkit breached diplomatic networks in Tajikistan, Uzbekistan, and Turkmenistan in early 2026 by exploiting CVE-2022-21894 -- a Secure Boot bypass Microsoft patched in 2023 but ...
BlackX bootkit exploits unrevoked Secure Boot binaries on Windows devices after attackers gain admin access to Central Asian diplomatic networks.