UEFI - Security Ticks

PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models

PKfail, secure boot, UEFI, Vulnerabilities, vulnerability / SecurityTicks

PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models 2024-07-26 at 13:01 By Eduard Kovacs A vulnerability dubbed PKfail can allow attackers to run malicious code during the boot process, which can be used to deliver UEFI bootkits. The post PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models appeared first […]

React to this headline:

PKfail Vulnerability Allows Secure Boot Bypass on Hundreds of Computer Models Read More »

Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability

Endpoint Security, UEFI, vulnerability / SecurityTicks

Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability 2024-06-20 at 16:46 By Eduard Kovacs Hundreds of PC and server models may be affected by CVE-2024-0762, a privilege escalation and code execution flaw in Phoenix SecureCore UEFI firmware. The post Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability

React to this headline:

Hundreds of PC, Server Models Possibly Affected by Serious Phoenix UEFI Vulnerability Read More »

Remotely Exploitable ‘PixieFail’ Flaws Found in Tianocore EDK II PXE Implementation

Microsoft, Network Security, Pixiefail, Quarkslab, Supply Chain Security, Tianocore, UEFI, Vulnerabilities / SecurityTicks

Remotely Exploitable ‘PixieFail’ Flaws Found in Tianocore EDK II PXE Implementation 2024-01-16 at 16:16 By Ryan Naraine Quarkslab finds serious, remotely exploitable vulnerabilities in EDK II, the de-facto open source reference implementation of the UEFI spec. The post Remotely Exploitable ‘PixieFail’ Flaws Found in Tianocore EDK II PXE Implementation appeared first on SecurityWeek. This article

React to this headline:

Remotely Exploitable ‘PixieFail’ Flaws Found in Tianocore EDK II PXE Implementation Read More »

Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images

Endpoint Security, UEFI, Vulnerabilities, vulnerability / SecurityTicks

Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images 06/12/2023 at 19:03 By Eduard Kovacs LogoFAIL is an UEFI image parser attack allowing hackers to compromise consumer and enterprise devices using malicious logo images. The post Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images appeared first on SecurityWeek. This article

React to this headline:

Enterprise, Consumer Devices Exposed to Attacks via Malicious UEFI Logo Images Read More »

NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections

bootkit, firmware, Malware & Threats, NSA, UEFI, Vulnerabilities / SecurityTicks

NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections 23/06/2023 at 20:58 By Ionut Arghire The National Security Agency (NSA) has released mitigation guidance to help organizations stave off BlackLotus UEFI bootkit infections. The post NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections Read More »