Get the latest tech news
New UEFI vulnerabilities send firmware devs across an entire ecosystem scrambling — PixieFail is a huge deal for cloud and data centers. For the rest, less so.
PixieFail is a huge deal for cloud and data centers. For the rest, less so.
People with even minimal access to such a network—say a paying customer, a low-level employee, or an attacker who has already gained limited entry—can exploit the vulnerabilities to infect connected devices with a malicious UEFI. By installing malicious firmware that runs prior to the loading of a main OS, UEFI infections can’t be detected or removed using standard endpoint protections. The malicious image in this scenario will establish a permanent beachhead on the device that’s installed prior to the loading of the OS and any security software that would normally flag infections.
Or read this on r/technology
