Search: “boot”

1,714 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 481 Malware 357 Ransomware 299 Exploit / PoC 169 Industry 114 Policy & legal 67 Data breach 57 Threat actor 53 Phishing & fraud 29 Advisory 19 Research 18 Tools 15 AI tools & infra 11 AI safety & security 10

SeverityAll critical 669 high 509 medium 331 low 163 info 46

VU#718077: UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot

CERT/CC details VU#718077: UEFI Shell embedded in SPI flash lets attackers bypass Secure Boot and execute pre-boot code; patches issued.

CERT/CC's VU#718077, reported by Eclypsium researcher Stas Lyakhov, describes how a UEFI Shell embedded in SPI flash can be abused by attackers who can modify UEFI boot configuration, creating multiple boot entries that bypass controls preventing the Shell from launching under Secure Boot. The Shell's dmem and mm commands allow arbitrary physical memory read/write, letting attackers overwrite Secure Boot values and execute unauthorized pre-boot code that can persist across reboots and OS reinstalls while degrading EDR effectiveness. AMI confirmed its Aptio UEFI BDS module is affected (CVE-2026-33197), and Cisco published an advisory for a variation affecting UCS Servers and UCS-based appliances (CVE-2026-20293). Firmware patches are being rolled out through OEM and IBV BIOS build pipelines.

CERT/CC Vulnerability NotesSep 8, 15:05 UTC · 8d agoVulnerability CVE-2026-20293 CVE-2026-33197 CVE-2026-6485

Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack

Ars Technica · SecurityDec 6, 15:02 UTC · Dec 6, 2023Exploit / PoC

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

The Hacker NewsJul 10, 15:57 UTC · Jul 10, 2026Exploit / PoC CVE-2026-33243

Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

Ars Technica · SecurityJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2015-53811

Malware evolution: January

Kaspersky SecurelistMay 7, 10:00 UTC · May 7, 2008Malware

Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them.

Ars Technica · SecurityJun 10, 19:00 UTC · Jun 10, 2025Vulnerability CVE-2025-3052 CVE-2025-47827

Changing threats, changing solutions: A history of viruses and antivirus

Kaspersky SecurelistApr 14, 16:22 UTC · Apr 14, 2008Malware

Attacks before system startup

Kaspersky SecurelistJun 16, 17:34 UTC · Jun 16, 2014Malware

Citrix UniconOS dual boot turns Windows endpoints into their own recovery device

Citrix released UniconOS dual boot in Release 7 2607, turning Windows endpoints into self-recovery devices after ransomware, failed updates or OS corruption.

Citrix announced dual boot in UniconOS Release 7 2607, which installs an isolated, hardened recovery environment alongside Windows in a separate partition protected by secure boot. If Windows is unavailable, users reboot into UniconOS and reconnect to applications via Citrix DaaS and SecurAccess with Chrome Enterprise. The capability is aimed at reducing reliance on spare hardware and central reimaging during ransomware or update failures, with automatic enrollment in UniconOS Management for fleet-wide boot policies.

Help Net SecurityAug 25, 00:00 UTC · 22d agoTools

12 Best Endpoint Encryption Software Compared (2026): Features & Pricing

2026 buying guide compares 12 endpoint encryption tools, framing paid products as management layers over free BitLocker and VeraCrypt engines.

An editorial comparison evaluates twelve endpoint encryption offerings, arguing that full-disk encryption itself is largely solved with free options like Microsoft BitLocker and open-source VeraCrypt. Paid products such as Sophos Central Device Encryption, Broadcom Symantec Endpoint Encryption, and Check Point Full Disk Encryption are positioned around management: central enforcement, recovery-key escrow, pre-boot authentication, and compliance evidence. The guide also warns against unmaintained tools like Rohos for business use and stresses operational concerns over cipher selection.

GBHackersupdated 09:52 UTC · 10h agofirst Sep 11, 07:12 UTC · 5d agoIndustry 14 sources

Top 10 Best Endpoint Encryption Software in 2026

A 2026 roundup of ten endpoint encryption products argues the engines are solved and buyers should choose management layers like Intune, Sophos, or Trellix.

The guide ranks ten endpoint encryption options, arguing BitLocker and FileVault have won the engine war so the real purchase decision is the management layer for compliance proof, key escrow, and cross-platform policy. Microsoft BitLocker with Intune is named the baseline for Windows estates, with Sophos, ESET, Trend Micro, Check Point, Trellix, and others covering mixed or regulated fleets. It also warns that TrueCrypt-lineage freeware is unmaintained and that Kaspersky cannot be sold to US customers.