Two exploits are threatening Secure Boot, but Microsoft is only patching one of them
The security standard keeps on failing, spectacularly
Ransomware can now run directly on the CPU, researcher warns
The ghost in the machine is reaching the deepest foundations of the computing infrastructure
Microsoft finally patches serious UEFI Secure Boot flaw after seven-month delay
Vulnerability could have allowed hackers to run malware during the boot process
Renegade Project turns your Arm-powered smartphone into a Windows 11 PC
The ultimate Windows Phone experience? Not quite...
Researchers discover "Bootkitty," the first UEFI bootkit for Linux
In a nutshell: A serendipitous discovery led to a new warning of threats against Linux. The open-source platform is becoming an increasingly tasty target for cyber-criminals, and malware writers are now looking to get to the lowest levels of the kernel as they already have on Windows.
PKfail security flaw is far more extensive than initially thought
Facepalm: Binarly analysts have issued a new warning just a couple of months after unveiling a security issue related to compromised platform keys used to enforce Secure Boot protection. The PKfail problem affects a significantly larger pool of devices and brands, and is not limited to firmware products developed by AMI.
Secure Boot rendered useless, over 200 PC models from different makers are affected
WTF?! If you thought your laptop, desktop, or server was protected by Secure Boot, think again. A new vulnerability dubbed "PKfail" has left Secure Boot wide open on hundreds of PC and devices across several major tech brands. Researchers at cybersecurity firm Binarly just dropped a bombshell report showing how a leaked cryptographic key has essentially nuked the security guarantees of Secure Boot for over 200 product models.
FreeDOS, now 30 years old, will soon run Windows 3.x
The command prompt of yore is still alive and kicking despite hardware incompatibilities
New Phoenix UEFI firmware flaw threatens numerous Intel chips, echoing BlackLotus concerns
A new worry for Team Blue with any "Lake" CPU
Nvidia RTX 20 and GTX 16 series GPU owners gain Resizable BAR support
Pascal users still left out for now
ReBarUEFI utility can enable Resizable BAR on older gaming PCs
Modding the UEFI firmware to potentially improve the frame rate in games
BlackLotus UEFI malware source code has leaked on GitHub
WTF?! BlackLotus was first discovered in October 2022, and it has since been described as one of the most complex annd dangerous threats against the secure Windows boot process. The bootkit will likely become even more dangerous in the near future, as a modified version of its source code is now available for download to all.
Pirated Windows installer found to contain crypto-hijacker, exploit EFI partition
Is EFI system partition infiltration becoming a commodity for advanced security threats?
AMD planning to replace AGESA firmware with open source alternative openSIL
A simple, flexible, and secure solution for silicon initialization on AMD CPUs
Microsoft explains how to detect a BlackLotus UEFI bootkit infection
What just happened? Months after researchers discovered the dangerous, "invisible" threat posed by BlackLotus, Microsoft is now giving investigators and sysadmins a detailed guidance over the telltale signs of an ongoing infection.
BlackLotus UEFI bootkit can defeat Secure Boot protection
The myth is real now, and you can't protect yourself from the ghost in the machine
A firmware update made Secure Boot useless for hundreds of MSI motherboards
Secure Boot isn't secure if the settings are wrong
BlackLotus, the new UEFI rootkit that makes security researchers worry
Why it matters: "BlackLotus" is being offered on underground forums as an all-powerful firmware rootkit, capable of surviving any removal effort and bypassing the most advanced Windows protections. If actual malware samples can prove the offer is real, of course.
How to Boot to BIOS in Windows 11
The Windows 11 POST process happens quickly for improved startup times, leaving little room to hit the designated setup key and access the BIOS menu. Here's how to boot to BIOS in Windows 11.
For years, some Gigabyte and Asus motherboards carried UEFI malware
The CosmicStrand rootkit is the latest indication that UEFI malware may be more common than previously thought
AMD promises to fix fTPM issue that causes stuttering and freezes in Windows 10 and Windows 11 for Ryzen users
Firmware updates are on the way, plus some temporary workarounds
Intel issues advisory for 16 new firmware vulnerabilities
Firmware patches are on the way
New UEFI firmware vulnerabilities affect several PC vendors
Supply chain infrastructure and enterprise systems are at risk
ESET has discovered the first UEFI rootkit in the wild
Persistence that can survive most hardware upgrades
