UEFI firmware from five major suppliers including Arm Ltd., Insyde, AMI, Phoenix Technologies, and Microsoft has vulnerabilities termed as “PixieFail”. The flaw allows attackers with minimal network access to infect devices with malicious firmware, which can bypass standard protection measures due to running before the main OS loads. The security flaws can be exploited in the PXE or Preboot Execution Environment, and mostly pose threats to public and private data centres. The vulnerabilities were discovered by researchers from security firm Quarkslab.
News – Data Breach at Virginia-Based Avosina Healthcare Impacts More Than 40,000 – teiss
News – Data Breach at Virginia-Based Avosina Healthcare Impacts More Than 40,000 teiss
