Hosted on MSN

Critical UEFI vulnerabilities found in Gigabyte motherboards — allow attackers to bypass Secure Boot and install firmware backdoors

Firmware security research company Binarly has discovered four new vulnerabilities affecting the UEFI (Unified Extensible Firmware Interface) on multiple Gigabyte motherboards. The vulnerabilities ...
Bleeping Computer

PKfail Secure Boot bypass lets attackers install UEFI malware

Hundreds of UEFI products from 10 vendors are susceptible to compromise due to a critical firmware supply-chain issue known as PKfail, which allows attackers to bypass Secure Boot and install malware.
PC World

Hundreds of Gigabyte motherboards vulnerable to Secure Boot attack

Crack open your desktop PC for a second. No rush, I’ll wait. Are you looking in there? Good. Do you see a Gigabyte motherboard? Okay, now peek under the CPU cooler. I’ll wait again. Okay, see that CPU ...
Hosted on MSN

Why Windows Secure Boot can be bypassed so easily (and what Microsoft isn't telling you)

Microsoft uses Secure Boot to safeguard your Windows PC from malware, attacks, and security vulnerabilities before your operating system fully loads. By default, Secure Boot is enabled on Windows PCs ...
Bleeping Computer

PKfail Secure Boot bypass remains a significant risk two months later

Roughly nine percent of tested firmware images use non-production cryptographic keys that are publicly known or leaked in data breaches, leaving many Secure Boot devices vulnerable to UEFI bootkit ...