Security News > 2021 > March > Supermicro, Pulse Secure release fixes for 'TrickBoot' attacks
Supermicro and Pulse Secure have released advisories warning that some of their motherboards are vulnerable to the TrickBot malware's UEFI firmware-infecting module, known as TrickBoot.
In an advisory released today, Supermicro is warning that some of their X10 UP motherboards are vulnerable to the TrickBoot malware and have released a 'critical' BIOS update to enable write protection.
"Supermicro is aware of the Trickboot issue which is observed only with a subset of the X10 UP motherboards. Supermicro will be providing a mitigation for this vulnerability," Supermicro warned today in a security advisory.
For those motherboards that have reached the end of life, owners must contact Supermicro to get access to the new BIOS. Pulse Secure also issued an advisory as their Pulse Secure Appliance 5000, and Pulse Secure Appliance 7000 devices run on vulnerable Supermicro hardware.
At this time, Pulse Secure has released a BIOS patch for devices running Pulse Connect Secure or Pulse Policy Secure.
Pulse Secure warns that apply the patch will require a reboot of the device.