UEFI firmware from five major suppliers including Arm Ltd., Insyde, AMI, Phoenix Technologies, and Microsoft has vulnerabilities termed as “PixieFail”. The flaw allows attackers with minimal network access to infect devices with malicious firmware, which can bypass standard protection measures due to running before the main OS loads. The security flaws can be exploited in the PXE or Preboot Execution Environment, and mostly pose threats to public and private data centres. The vulnerabilities were discovered by researchers from security firm Quarkslab.
The True Cost of Focusing on Cost Instead of Cost-Effectiveness
When payors consider only the cost of the medication and not the cost and risk to the patient, doctor, and healthcare system, the irony is
