attack_type:secure_boot_bypass × criticity:high × limpar

Resultados

2 casos · pág. 1/1

sec.cloudapps.cisco.com · há 3d high

Cisco UCS UEFI Shell flaw (CVE-2026-20293) lets attackers bypass Secure Boot and run unauthorized software

Cisco disclosed CVE-2026-20293, a high-severity UEFI Secure Boot bypass in the UEFI Shell of Cisco UCS Servers and UCS-based appliances. An authenticated attacker with a user or admin role, or an unauthenticated attacker with physical access, can bypass Secure Boot validation and execute unauthorized software. Cisco has released software …

CVE-2026-20293

gbhackers.com · há 8h · 2 fontes · 2 atualizações high

APT41 deploys BlackX UEFI bootkit, a BlackLotus copycat exploiting Baton Drop, against Central Asian diplomatic agencies

Kaspersky GReAT identified an APT campaign in early 2026 targeting diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan. The attackers used a UEFI bootkit dubbed BlackX, which closely resembles BlackLotus (advertised on underground forums for $5,000 in October 2022 and confirmed by ESET in March 2023, per gbhackers.com) and bypa…

CVE-2022-21894 CVE-2023-24932 APT41 FishMonger government diplomatic