Ransomware can now run directly on the CPU, researcher warns
The ghost in the machine is reaching the deepest foundations of the computing infrastructure
Researchers discover "Bootkitty," the first UEFI bootkit for Linux
In a nutshell: A serendipitous discovery led to a new warning of threats against Linux. The open-source platform is becoming an increasingly tasty target for cyber-criminals, and malware writers are now looking to get to the lowest levels of the kernel as they already have on Windows.
Microsoft left a kernel-level, zero-day bug in Windows for six months before patching it
Hackers exploited the issue to spread an extremely stealthy rootkit
BlackLotus, the new UEFI rootkit that makes security researchers worry
Why it matters: "BlackLotus" is being offered on underground forums as an all-powerful firmware rootkit, capable of surviving any removal effort and bypassing the most advanced Windows protections. If actual malware samples can prove the offer is real, of course.
For years, some Gigabyte and Asus motherboards carried UEFI malware
The CosmicStrand rootkit is the latest indication that UEFI malware may be more common than previously thought
ESET has discovered the first UEFI rootkit in the wild
Persistence that can survive most hardware upgrades
