Finite State raises $27 million for device security platform
The Series C, led by The O.H.I.O. Fund, will fund international expansion and more autonomous firmware analysis.
1
Stories per day · 30 days
3 RSS
Relateduefi8pxe7edk-ii5android4command-injection4finite-state4funding4supply-chain4edk23iot3pre-boot3product-security3secure-boot3ad-fraud2apple2buffer-overflow2exploit-db2ics2
81 stories, newest first · one card per story
Stories tagged #firmware
Intel and AMD advisories cover over 200 vulnerabilities
Intel lists three critical issues, including MigTD remote code execution; AMD rates none critical.
Researcher bypassed Ray-Ban Meta glasses checks to run her code
Firmware through version 126 skipped signature checks; version 127’s check can be disabled by editing a phone settings file.
FrodoBots EarthRover Mini+ firmware flaws enable remote root control
Hard-coded AWS and MQTT credentials enable fleet-wide root commands; the vendor says fixes are in the latest firmware.
1
Zyxel GS1900 June patch missed flaw behind attacks on 996 switches
Binarly says all 10 June firmware releases still allow unauthenticated root commands; Zyxel shipped a later fix.
Metis fuzzing discovers 137 bugs in UEFI edk2 bootloader protocols
Metis rehosts edk2 protocols as user-space applications and achieves 73.1 percent coverage, 1.7 times higher than FuzzUEr, reporting 26 previously unknown bugs to vendors.
Google disrupts XCPE Android TV botnet tied to Videostrong
Google says more than 1.3 million set-top boxes carried the firmware backdoor and affiliate takedowns reach at least 10 million other devices.
1
Callix Detects Access Control Flaws in Android Firmware
Callix found 819 vulnerable paths in 1,750 pre-installed Android apps.
Simantic launches a firmware simulator for AI agents
The Rust simulator targets selected STM32, ESP32, and RP2040 boards so agents can test firmware without flashing hardware.
6
Moxa MAR-2000 Executer path allows authenticated command injection
A stored configuration field is built into the shell command that launches an operator program as the model process.
EDK II UEFI flaw CVE-2026-97631 can run code before the OS
A 16-year-old PXE ICMP buffer overflow, rated 9.5, was disclosed early after AMI published a fix.
CVE-2026-97631: unauthenticated pre-boot RCE in EDK II PXE driver
An attacker on the network can execute code during IPv4 or IPv6 PXE boot via ICMP error messages, affecting UEFI firmware on many servers.
16-year-old EDK II PXE buffer overflow runs code before Secure Boot
CVE-2026-97631 lets an adjacent-network attacker hang or hijack network boots on servers, and no stable EDK II release ships the fix yet.
CVE-2026-97631 lets attackers run code before the OS on EDK II PXE boots
An unauthenticated ICMP sender can overflow a 504-byte field during PXE boot; AMI’s fix surfaced early and affected devices remain unclear.
Intelbras cameras allow unauthenticated firmware updates that cause DoS
A local Wi-Fi attacker can keep cameras offline by repeatedly posting to an unauthenticated upgrade endpoint; firmware R.260804 requires authentication.
1
EDK II PXE boot flaw can run code before the OS loads (CVE-2026-97631)
Oversized ICMP errors can corrupt firmware memory only while a machine is PXE-booting; TianoCore merged a fix on October 15.
EDK II PXE flaw CVE-2026-97631 allows pre-boot code execution
One ICMP error during network boot can crash the client or, on a known build, run code before Secure Boot; vendor updates are still pending.
EDK2 UEFI bug CVE-2026-97631 enables pre-boot code execution
A 16-year-old buffer overflow in the PXE ICMP parser scores 9.5; an early AMI patch made the bug public before the planned January disclosure.
Researchers retract claimed Apple Secure Kernel type-dispatch bug
On native Duo 27.1 firmware, PAN blocks an ordinary Exclave’s fake capability read and returns error 4.
1
Tinfoil replaces OVMF with about 300 lines of assembly
The company moved enclave boot measurement out of a million-line C firmware so an untrusted host cannot load arbitrary guest code.
1
FindMyWeb reverse-engineers Apple, Google and Samsung tracker networks
The open-source stack pairs a web interface with Zephyr firmware so users can build their own trackers.
1
ASUS pitches dual BIOS on ExpertBook A7 for SMB firmware recovery
A second firmware chip can boot the laptop if the primary BIOS fails checks or an update is interrupted.
Attackers heat French supermarket refrigeration, spoiling food stocks
Hundreds of stores face losses put at tens to hundreds of millions of euros after defrost cycles were extended.
Show HN post says full iOS 16.5 firmware runs on Android
The feed only links the hackios-xnu-kernel repository and notes 53 points and 22 comments.