BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
2026-10-24T19:23:21Z•7ad6644a20c89c324c9359fec18ca1bbe0c93675fe123a09a959c5bdf28d5769
AI securityArubaOSBaton DropPHP2ShellPyPI malwareSecure Boot bypassUEFI bootkitVeloCloud Orchestratoractive exploitationcredential theftdata breachend-of-supportphishingremote code executionsecrets rotationsoftware supply chain compromisezero-day
What happened
A BleepingComputer security-news digest covering active exploitation, critical vulnerabilities, supply-chain compromises, data breaches, and defensive updates. Key items include the BlackX UEFI bootkit exploiting the Baton Drop Secure Boot flaw, actively exploited VeloCloud Orchestrator and PHP vulnerabilities, critical ArubaOS flaws, the LiteLLM/PyPI supply-chain compromise, and major breaches affecting Quest Diagnostics, Railway, and Capcom.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 7ad6644a20c89c324c9359fec18ca1bbe0c93675fe123a09a959c5bdf28d5769
- Enrichment time
- 2026-10-24T19:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.