Security News

Update Mechanism Flaws Allow Remote Attacks on UEFI Firmware
2018-08-08 11:20

The glitch stems from a functionality intended to allow updates to the UEFI firmware.

Google Password Protects Pixel 2 Firmware
2018-06-04 14:44

Google has made the firmware of Pixel 2 devices resistant to unauthorized attempts to upgrade it by password protecting it. read more

"Unpatchable" Nintendo Switch exploit is perfect example of the importance of firmware security
2018-04-24 15:57

The exploit, which affects all Nvidia Tegra X1 systems, allows arbitrary code execution at the bootROM level.

AMD confirms processor flaws found by CTS Labs, firmware fixes are coming
2018-03-21 19:53

Chipmaker AMD has confirmed that the vulnerabilities discovered by CTS Labs researchers earlier this month do affect a variety of its products, and that firmware patches mitigating them will be...

AMD promises firmware fixes for security processor bugs
2018-03-20 22:00

All bugs require administrative access to exploit.

Intel Issues Updated Spectre Firmware Fixes For Newer Processors
2018-02-21 21:21

Intel has issued a firmware fix to help its Kaby Lake, Coffee Lake and Skylake processors address the Spectre security flaw.

Multiple Flaws Patched in WD MyCloud Device Firmware
2018-02-05 13:13

Vulnerabilities that could allow unauthorized file deletion, unauthorized command execution and authentication bypass impacted WD (Western Digital) MyCloud devices, Trustwave reports.  read more

Microsoft Patch Nukes Bad Intel Firmware Fix
2018-01-29 14:48

Fix for Spectre May Result in Lost or Corrupted DataHow bad does a third-party fix have to be for Microsoft to issue a rare, weekend update that helps IT administrators disable it? A security...

Microsoft Patch Nukes Bad Intel Firmware
2018-01-29 14:03

Fix for Spectre May Result in Lost or Corrupted DataHow bad does a third-party fix have to be for Microsoft to issue a rare, weekend update that helps IT administrators disable it? A security...

Intel testing new Spectre fixes, tells everyone to hold off on deploying current firmware updates
2018-01-23 16:17

Shortly after Red Hat stopped providing microcode to address variant 2 (branch target injection) of the Spectre attack, Intel has advised OEMs, cloud service providers, system manufacturers,...