šŸš€ Medial just raised $500k in Pre-Series A. Tap to read the announcement. šŸŽ‰
Login

News on Medial

Critical vulnerability affecting most Linux distros allows for bootkits

ArstechnicaArstechnica Ā· 1y
Critical vulnerability affecting most Linux distros allows for bootkits

Linux developers are working to fix a high-severity vulnerability that can enable the installation of malware at the firmware level, making it difficult to detect or remove. The vulnerability is found in "shim," a component that runs during the boot process before the operating system starts. It plays a crucial role in secure boot, a protection feature in most devices to ensure every link in the boot process is verified. Successful exploitation of the vulnerability allows attackers to execute malicious firmware during the earliest stages of booting, undermining the secure boot mechanism. The vulnerability requires compromising the targeted device or the server/network the device boots from.

3
View Source

Comments

More Like this

Federal agency warns critical Linux vulnerability being actively exploited

Federal agency warns critical Linux vulnerability being actively exploited

Google quietly corrects previously submitted disclosure for critical webp 0-day

Google quietly corrects previously submitted disclosure for critical webp 0-day

Actively exploited Cisco 0-day with maximum 10 severity gives full network control

Actively exploited Cisco 0-day with maximum 10 severity gives full network control

ā€œRegreSSHionā€ vulnerability in OpenSSH gives attackers root on Linux

ā€œRegreSSHionā€ vulnerability in OpenSSH gives attackers root on Linux

Google Releases Chrome Update to Address Actively Exploited Vulnerability

Google Releases Chrome Update to Address Actively Exploited Vulnerability

ā€œThis vulnerability is now under mass exploitation.ā€ Citrix Bleed bug bites hard

ā€œThis vulnerability is now under mass exploitation.ā€ Citrix Bleed bug bites hard

Zyxel warns of vulnerabilities in a wide range of its products

Zyxel warns of vulnerabilities in a wide range of its products

Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk

Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk

Ivanti warns of critical vulnerability in its popular line of endpoint protection software

Ivanti warns of critical vulnerability in its popular line of endpoint protection software

Maximum-severity GitLab flaw allowing account hijacking under active exploitation

Maximum-severity GitLab flaw allowing account hijacking under active exploitation

Download the medial app to read full posts, comements and news.