Researchers from security firm Eclypsium have called out DNA sequencer Illumina iSeq 100 for not using Microsoft’s Secure Boot protection tool, potentially leaving it vulnerable to firmware attacks. The sequencer can boot from a legacy mode, using older systems which harbour years’ worth of potential vulnerabilities. Hardware Read/Write protections are not enabled, allowing an attacker to modify the device’s firmware. The sequencer is common in labs globally, including at gene-testing firm 23andMe.

New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth
An updated version of a malware loader, known as Hijack Loader, has been discovered with new features aimed at evading detection and maintaining persistence. The