Resultados

2 casos · pág. 1/1

sec.cloudapps.cisco.com · há 3d high

Cisco UCS UEFI Shell flaw (CVE-2026-20293) lets attackers bypass Secure Boot and run unauthorized software

Cisco disclosed CVE-2026-20293, a high-severity UEFI Secure Boot bypass in the UEFI Shell of Cisco UCS Servers and UCS-based appliances. An authenticated attacker with a user or admin role, or an unauthenticated attacker with physical access, can bypass Secure Boot validation and execute unauthorized software. Cisco has released software …

CVE-2026-20293

securelist.com · há 1d high

APT41 deploys BlackX UEFI bootkit, a BlackLotus copycat exploiting Baton Drop, against Central Asian diplomatic agencies

Kaspersky GReAT identified an APT campaign in early 2026 targeting diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan. The attackers used a UEFI bootkit dubbed BlackX, which closely resembles BlackLotus and bypasses Secure Boot by exploiting Baton Drop (CVE-2022-21894). Kaspersky attributes the activity to APT41 with medium co…

CVE-2022-21894 CVE-2023-24932 APT41 FishMonger government diplomatic