Plus de 200 000 ordinateurs Framework vulnérables : une porte d’entrée pour les bootkits
https://www.it-connect.fr/plus-de-200-000-ordinateurs-framework-vulnerables-une-porte-dentree-pour-les-bootkits/
#Infosec #Security #Cybersecurity #CeptBiro #OrdinateursFramework #Vulnerables #Bootkits
Sécurité UEFI : une vulnérabilité permet de contourner le Secure Boot et de déployer des bootkits
https://www.it-connect.fr/faille-uefi-vulnerabilite-contourner-secure-boot-deployer-bootkits-cve-2024-7344/
#Infosec #Security #Cybersecurity #CeptBiro #SecuriteUEFI #Vulnerabilite #SecureBoot #Bootkits
Researchers have identified “Bootkitty,” the first known UEFI bootkit developed to target Linux systems. #cybersecurity #linux #bootkitty #ESET #malware #bootkits
Critical #Vulnerability Affecting Most #Linux Distros Allows For #Bootkits - Slashdot
#security
Linux developers are in the process of patching a high-severity vulnerability that, in certain cases, allows the installation of malware that runs at the firmware level, giving infections access to the deepest parts of a device where they're hard to detect or remove. ArsTechnica: The vulnerability r...
The #LogoFail #UEFI #exploit is a perfect example of how capitalism fucks everything up. So many people worked so hard on securing UEFI against #bootkits but having a goddamn image load was necessary for capitalist "intellectual property" to be enforced, thus opening this vulnerability for literally every Windows and Linux system with a hardware manufacturer logo loading in boot, which is most of them. https://arstechnica.com/security/2023/12/just-about-every-windows-and-linux-device-vulnerable-to-new-logofail-firmware-attack/
This isn't a security fail, it's a #capitalism fail, because the social/legal regime of #intellectualproperty is actually unnecessary and oppressive, and in this case prevented people from designing secure systems.
Multiple security vulnerabilities collectively named LogoFAIL affect image-parsing components in the UEFI code from various vendors. Researchers warn that they could be exploited to hijack the execution flow of the booting process and to deliver bootkits.
Des millions de PC équipés d’une carte mère Gigabyte sont vulnérables à cause d’une backdoor
#gigabyte #PC #backdoors #firmware #backdoor #rootkits #bootkits #BIOS #UEFI
Stealthy #UEFI #malware bypassing #SecureBoot enabled by unpatchable #Windows flaw | Ars Technica
#BlackLotus represents a major milestone in the continuing evolution of UEFI #bootkits.
Rene Robichaud
Winbuzzer
PrivacyDigest
Porquerias | 1312 🏴🌵
Dennis "D.C." Dietrich
LSDM
Teddy / Domingo (🇨🇵/🇬🇧)