uefi – Computer Security Articles

MalwareBytes Security

A week in security (June 17 – June 23)

June 24, 2024 admin akira, icketmaster, jira, kaspersky, news, overlays, Recall, T-Mobile, TikTok, uefi, VMware

A list of topics we covered in the week of June 17 to June 23 of 2024

Kaspersky Security

LogoFAIL attack via image substitution in UEFI | Kaspersky official blog

January 13, 2024 admin Business, enterprise, uefi, vulnerabilities

Credit to Author: Enoch Root| Date: Wed, 27 Dec 2023 19:27:47 +0000

Researchers have found a way to attack computers through the logo image replacement mechanism in UEFI.

Kaspersky Security

Protecting information in memory | Kaspersky official blog

June 27, 2023 admin Attacks, Business, dumps, enterprise, linux, memory, passwords, Ram, SMB, uefi, windows

Credit to Author: Stan Kaminsky| Date: Tue, 27 Jun 2023 17:53:20 +0000

How to protect information in memory and hibernation files against interception and theft.

Kaspersky Security

Safeguards against firmware signed with stolen MSI keys | Kaspersky official blog

May 30, 2023 admin bootkits, Business, enterprise, Intel, msi, ransomware, technologies, Threats, uefi

Credit to Author: Stan Kaminsky| Date: Tue, 30 May 2023 14:29:28 +0000

Tips for how to protect your computer from UEFI threats following an MSI keys leak.

Security Sophos

May’s Patch Tuesday haul touches a six-pack of product families

May 11, 2023 admin av1, blacklotus, bootkit, cve-2023-24881, cve-2023-24932, cve-2023-24941, cve-2023-29325, cve-2023-29340, Microsoft Office, microsoft windows, Patch Tuesday, secure boot, Sharepoint, teams, threat research, uefi

Credit to Author: Angela Gunn| Date: Tue, 09 May 2023 19:27:52 +0000

A relatively light month by the numbers, but several patches require extra effort to deploy

Microsoft Security

Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign

April 11, 2023 admin blacklotus, bootkit, cve-2022-21894, cybersecurity, microsoft detection and response team (dart), uefi

Credit to Author: Microsoft Security Threat Intelligence – Editor| Date: Tue, 11 Apr 2023 17:00:00 +0000

This guide provides steps that organizations can take to assess whether users have been targeted or compromised by threat actors exploiting CVE-2022-21894 via a Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus.

The post Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign appeared first on Microsoft Security Blog.

Kaspersky Security

CosmicStrand rootkit hides in the UEFI firmware | Kaspersky official blog

July 26, 2022 admin cosmicstrand, GReAT, rootkit, Threats, uefi

Credit to Author: Julia Glazova| Date: Tue, 26 Jul 2022 17:10:51 +0000

We talk about the CosmicStrand rootkit, which tries to lie low in UEFI, the motherboard firmware.

MalwareBytes Security

Lenovo issues fixes for laptop backdoors

April 21, 2022 admin backdoor, cve-2021-3970, cve-2021-3971, cve-2021-3972, Exploits and vulnerabilities, firmware, Lenovo, uefi

Credit to Author: Pieter Arntz| Date: Thu, 21 Apr 2022 15:11:05 +0000

Millions of Lenovo laptops were shipped with a backdoor that was intended for the manufacturing process only.

The post Lenovo issues fixes for laptop backdoors appeared first on Malwarebytes Labs.

← Previous