Hackers are using the LogoFAIL vulnerability to hijack the initial boot stage of Linux devices by utilizing a year-old firmware flaw. The critical flaw is part of the LogoFAIL suite discovered by Binarly. Though not yet widely used, the exploit has been found reliable and could pose a threat soon. It installs a bootkit for Linux via code injected into the device’s UEFI, bypassing Secure Boot protections.
Ways to ward off hackers
Jeffrey Bowie was arrested for trying to install malware into computers at SSM St. Anthony’s Hospital, Oklahoma City. Tech consulting firm Coffey & Consult noted
