Most data centers and servers on the planet could be vulnerable to dangerous UEFI firmware flaw — here's what…
- Researchers uncover critical UEFI firmware flaw that could enable remote code execution on servers
- Public release of patch code may accelerate exploit development before many vendors deploy updates
- Delayed firmware patching across hardware ecosystems leaves organizations exposed despite available fixes
Cybersecurity researchers from Anthropic and Google have discovered a critical-severity vulnerability in boot-time firmware used by practically every server in existence today.
A patch is available, but given the fragmented market of UEFI manufacturers, it could take months before most of the servers are secured. In the meantime, patch code was made publicly available, which means cybercriminals will have their work laid out for them.
Discovering the bug
Virtually all modern servers today run UEFI (Unified Extensible Firmware Interface), software built into the server’s motherboard that helps start the device and load the operating system. It includes security features like Secure Boot, which helps stop unauthorized programs from running...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
