Researchers Discover "Bootkitty" – First UEFI ... - The Hacker News
3 days ago · Regardless of the UEFI Secure Boot status, the bootkit is mainly engineered to boot the Linux kernel and patch, in memory, the function's response for integrity verification before GNU GRand Unified Bootloader is executed.Specifically, it proceeds to hook two functions from the UEFI authentication protocols if Secure Boot is enabled in such a way that UEFI integrity checks are bypassed.
Home | Unified Extensible Firmware Interface Forum
May 9, 2022 · The UEFI Forum is pleased to announce the release of the updated UEFI Platform Initialization (PI) Specification, Version 1.8. View the specification in PDF or HTML format.
New UEFI vulnerabilities send firmware devs industry wide …
Jan 17, 2024 · UEFI firmware from five of the leading suppliers contains vulnerabilities that allow attackers with a toehold in a user's network to infect connected devices with malware that runs at the...
Found on VirusTotal: The world’s first UEFI bootkit for Linux
3 days ago · UPDATE: November 28, 3:20 PM California time. The headline of this post has been changed. This update is adding the following further details: this threat is not a UEFI firmware implant or rootkit ...
Latest UEFI news - BleepingComputer
Hundreds of UEFI products from 10 vendors are susceptible to compromise due to a critical firmware supply-chain issue known as PKfail, which allows attackers to bypass Secure Boot and install...
News | Unified Extensible Firmware Interface Forum
Jun 6, 2017 · New UEFI Specification, Version 2.8, captures evolution of platform firmware technology. ARM Strengthens Its Long-Standing Presence and Contributions to the UEFI Ecosystem.
Just about every Windows and Linux device vulnerable to new …
Dec 6, 2023 · LogoFAIL is a constellation of two dozen newly discovered vulnerabilities that have lurked for years, if not decades, in Unified Extensible Firmware Interfaces responsible for booting modern...
UEFI | News & Insights | The Hacker News
Oct 6, 2020 · PC maker Lenovo has addressed yet another set of three shortcomings in the Unified Extensible Firmware Interface (UEFI) firmware affecting several Yoga, IdeaPad, and ThinkBook devices.
Researchers Uncover UEFI Vulnerability Affecting ... - The Hacker News
Jun 20, 2024 · Cybersecurity researchers have disclosed details of a now-patched security flaw in Phoenix SecureCore UEFI firmware that affects multiple families of Intel Core desktop and mobile processors.
A Call to Action: Bolster UEFI Cybersecurity Now - CISA
Aug 3, 2023 · Attackers have exploited UEFI implementation flaws to gain persistence – that is, the ability to maintain access to a compromised system despite system resets and defensive actions. Based on recent incident responses to UEFI malware such as BlackLotus, the cybersecurity community and UEFI developers appear to still be in learning mode.
- Some results have been removed