25 October 2026

• BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
  A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a...
• Abandoned Popcorn Time app exposed millions of devices to RCE attacks
  Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that...
• Microsoft Teams to get AI-powered, context-aware phishing detection
  Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026. [...]