Firmware Security – TheCyberThrone

UEFI Firmware Vulnerabilities Patched in Lenovo Laptops

Researchers has identified three vulnerabilities have been discovered in the UEFI firmware of several Lenovo notebooks. Tracked CVE-2022-3430, CVE-2022-3431 and CVE-2022-3432, affecting various Lenovo Yoga, IdeaPad and ThinkBook devices. The…

PravinKarthik November 11, 2022

HP Patches Critical Vulnerabilities in its Printer Products

HP warns of critical vulnerabilities in hundreds of HP printer models, including the LaserJet Pro, OfficeJet and DeskJet series. The first vulnerability allows a buffer overflow. The vulnerability affects dozens…

PravinKarthik March 24, 2022

HP UEFI Firmware Bugs Addressed

Researchers discovered a dozen of potentially serious vulnerabilities affecting UEFI firmware present on devices from HP and possibly other vendors. A total of 16 CVE identifiers have been assigned to …

PravinKarthik March 9, 2022

Moon Bounce ! UEFI Firmware Implant

A known Chinese APT actor using an UEFI implant to maintain stealthy persistence across reboots, disk formatting or disk replacements is into limelight shows that the Threat actors (APT 41)…

PravinKarthik January 21, 2022

Intel Feature Upgrade Feature in Linux

Intel now comes with a new ACPI specification called Platform Firmware Runtime Update and Telemetry (PFRUT). This allows for firmware updates to a PC’s BIOS or UEFI without forcing a…

PravinKarthik January 4, 2022

Vulnerabilities Found in NetGear NightHawk

Researchers have discovered multiple vulnerabilities in the latest firmware version (version 1.0.4.120) of the popular Netgear Nighthawk R6700v3 WiFi router. An attacker can trigger the vulnerabilities to take full control…

PravinKarthik January 1, 2022

iLOBleed Rootkit Flaw Keeps HPE Servers in Fray

An unknown rootkit has been found setting its sights on HPE Integrated Lights-Out (iLO) server management technology to carry out in-the-wild attacks that tamper with the firmware modules and completely…

PravinKarthik December 30, 2021