Nearly all motherboard makes were found vulnerable to the LogoFAIL security flaw at the end of last year. And at long last, AMD's vendor partners are finally beginning to roll out patched firmware.
Binarly RSS
A curious Microsoft employee has saved the world from a potential global meltdown as several Linux distros were found vulnerable to an XZ backdoor tracked under CVE-2024-3094 (CVSS score of 10.0).
The source code for BlackLotus vulnerability leaked a few days ago, almost around the same time as Microsoft rolled out the second phase hardening of its secure boot flaw via Dynamic Windows updates.
Firmware security research firm Binarly has revealed that it discovered nearly two dozen vulnerabilities in InsydeH2O UEFI used by several vendors like Microsoft, Intel, Dell, HP, and more.