Hot Topics

EFI

cyber attacks

Not All Macs Get Firmware Security Fixes, Researchers Find

| | Apple, command injection, cross-site scripting, EFI, Extensible Firmware Interface, firmware update, firmware vulnerability, iMac, Mac update, Macbook, macos, Malware, Netgear, OS X, Privilege Escalation, ReadyNAS, Remote Code Execution, router security, Thunderstrike
An investigation by researchers from Duo Security revealed that Apple does not consistently release security patches for known vulnerabilities in the low-level firmware code of its Mac computers. When it does, the patches ...
Thoughts on Firmware Rootkits

Thoughts on Firmware Rootkits

| | acpi, EFI, firmware, option ROM, rootkit, tpm, trusted computing
Over the last couple of years I've presented a number of low level attacks aimed at demonstrating off-disk rootkit persistence in firmware.Vulnerability research into hardware typically has a high barrier to entry; ...
aut disce, aut discede

Secure Guardrails