A critical vulnerability (CVE-2024-54085) in American Megatrends' MegaRAC BMC software threatens server security worldwide, allowing unauthenticated remote attackers to hijack or brick servers without user interaction. Affecting equipment from major vendors like HPE and Asus, with over 1,0...
A critical UEFI Secure Boot vulnerability (CVE-2024-7344) affecting multiple system recovery software suites has been discovered, allowing unauthorized code execution during system boot. The flaw, found in seven major recovery applications, enables attackers to bypass Secure Boot protectio...
Over 25,000 SonicWall SSLVPN devices are exposed to critical security vulnerabilities, with 20,000 running outdated firmware. Research shows 430,363 publicly exposed firewalls, facing risks like vulnerability exploitation and password attacks. Recent ransomware incidents highlight urgent n...
Bootkitty, the first Linux-targeting UEFI bootkit, exploits LogoFAIL vulnerability to bypass Secure Boot protection through malicious BMP files. This sophisticated malware primarily affects Lenovo devices with Insyde firmware, potentially impacting other major manufacturers. The discovery ...
