Tag Archives: uefi

300+ models of MSI motherboards have Secure Boot turned off. Is yours affected?

reader comments 14 with 0 posters participating Share this story Secure Boot is an industry standard for ensuring that Windows devices don’t load malicious firmware or software during the startup process. If you have it turned on—as you should in most cases, and it’s the default setting mandated by Microsoft—good for you. If you’re using… Read More »

Lenovo driver goof poses security risk for users of 25 notebook models

Getty Images reader comments with 0 posters participating Share this story More than two dozen Lenovo notebook models are vulnerable to malicious hacks that disable the UEFI secure boot process and then run unsigned UEFI apps or load bootloaders that permanently backdoor a device, researchers warned on Wednesday. At the same time that researchers from… Read More »

Discovery of new UEFI rootkit exposes an ugly truth: The attacks are invisible to us

Enlarge (credit: Getty Images) Researchers have unpacked a major cybersecurity find—a malicious UEFI-based rootkit used in the wild since 2016 to ensure computers remained infected even if an operating system is reinstalled or a hard drive is completely replaced. The firmware compromises the UEFI, the low-level and highly opaque chain of firmware required to boot up… Read More »

Vulnerabilities allowing permanent infections affect 70 Lenovo laptop models

Enlarge (credit: Lenovo) For owners of more than 70 Lenovo laptop models, it’s time once again to patch the UEFI firmware against critical vulnerabilities that attackers can exploit to install malware that’s nearly impossible to detect or remove. The laptop maker on Tuesday released updates for three vulnerabilities that researchers found in the UEFI firmware… Read More »

Hackers can infect >100 Lenovo models with unremovable malware. Are you patched?

Enlarge / This is the 14-inch variant of the Yoga Slim 9i, with leather finish. reader comments 72 with 52 posters participating Share this story Lenovo has released security updates for more than 100 laptop models to fix critical vulnerabilities that make it possible for advanced hackers to surreptitiously install malicious firmware that can be… Read More »

Trusted platform module security defeated in 30 minutes, no soldering required

Getty Images reader comments 47 with 39 posters participating Share this story Let’s say you’re a large company that has just shipped an employee a brand-new replacement laptop. And let’s say it comes preconfigured to use all the latest best security practices, including full-disk encryption using a trusted platform module, password-protected BIOS settings, UEFI SecureBoot,… Read More »

One of the Internet’s most aggressive threats could take UEFI malware mainstream

reader comments 97 with 68 posters participating Share this story One of the Internet’s most aggressive threats has just gotten meaner, with the ability to infect one of the most critical parts of any modern-day computer. Trickbot is a piece of malware that’s notable for its advanced capabilities. Its modular framework excels at gaining powerful… Read More »

Custom-made UEFI bootkit found lurking in the wild

sasha85ru | Getty Imates reader comments 29 with 25 posters participating Share this story For only the second time in the annals of cybersecurity, researchers have found real-world malware lurking in the UEFI, the low-level and highly opaque firmware required to boot up nearly every modern computer. As software that bridges a PC’s device firmware… Read More »