Discovering the LogoFAIL vulnerabilities started as a small research project on attack surfaces from image-parsing components in the context of custom or outdated parsing code in UEFI firmware. The ...

Security company Binarly has announced an exploit called LogoFAIL that attacks 24 vulnerabilities found in UEFI related to booting devices running Windows or Linux. The 'Logo' in LogoFAIL comes from ...

Update added below about this bootkit being created by students in Korea's Best of the Best (BoB) cybersecurity training program. The recently uncovered 'Bootkitty' Linux UEFI bootkit exploits the ...

Many PC and mainboard manufacturers are sloppy when it comes to implementing UEFI Secure Boot. This finding is not new, but now the company Binarly is reporting another variation: The UEFI BIOS of ...

In a nutshell: A serendipitous discovery led to a new warning of threats against Linux. The open-source platform is becoming an increasingly tasty target for cyber-criminals, and malware writers are ...

Researchers on Wednesday announced a major cybersecurity find—the world’s first-known instance of real-world malware that can hijack a computer’s boot process even when Secure Boot and other advanced ...

ESET Research has discovered HybridPetya, on the VirusTotal sample sharing platform. It is a copycat of the infamous Petya/NotPetya malware, adding the capability of compromising UEFI-based systems ...

Fresh from a €561 million fine for failing to comply with a previous antitrust agreement, Microsoft is once again being targeted in Europe over their allegedly anti-competitive business practices.