Uefi Secure Boot: Not So Secure

Video

ESET researchers uncover a vulnerability successful a UEFI exertion that could alteration attackers to deploy malicious bootkits connected unpatched systems

16 Jan 2025

ESET researchers person uncovered a vulnerability that, if exploited, would let bad actors to circumvent UEFI Secure Boot and deploy malicious UEFI bootkits specified arsenic Bootkitty aliases BlackLotus connected susceptible systems. Tracked arsenic CVE-2024-7344, nan information flaw affects astir UEFI-based systems and its exploitation would lead to nan execution of untrusted codification during nan strategy startup process – moreover wherever UEFI Secure Boot is enabled and sloppy of nan operating strategy installed. The affected UEFI exertion is portion of 7 strategy betterment programs.

What other should you cognize astir nan vulnerability and what tin you do to guarantee your systems are safe? Hear from ESET Chief Security Evangelist Tony Anscombe and make judge to publication nan afloat blogpost detailing nan discovery.

Connect pinch america on Facebook, X, LinkedIn and Instagram.