#uefi
-
UEFI firmware flaw enables code execution early in the boot process on servers
A critical vulnerability in EDK2 lets attackers run code while a system is still booting. According to Ars Technica, most servers in the world are at risk.
-
BlackX: China-Linked Bootkit Slips Past Secure Boot on "Patched" Windows
Kaspersky has detailed BlackX, a new UEFI bootkit that hit diplomatic bodies across Central Asia. Researchers attribute the campaign to the China-linked group APT41.
-
Microsoft's Secure Boot Could Be Bypassed in a Couple of Clicks for Almost Its Entire Life
Researchers at ESET have found that Secure Boot, the mechanism Microsoft devised to protect firmware from infection, could be trivially bypassed for 13 of the 14 years it has existed.
-
11 Old Microsoft-Signed Linux UEFI Bootloaders Found That Allow Secure Boot Bypass
Cybersecurity researchers have identified 11 outdated Microsoft-signed UEFI applications that can be used to bypass Secure Boot on most modern systems.