Many PC models from top brands have faced security breaches due to a weak BIOS password. Researchers from Binarly (thanks Ars Technica), a security firm, revealed that the Secure Boot system, which ensures only trusted software boots up a device, was compromised on over 200 models. These models include those from Acer, Dell, Gigabyte, Intel, and Supermicro.
The root cause of this breach was a cryptographic key protected by just a four-letter password. This key is crucial for Secure Boot and is used by multiple manufacturers. The key was leaked online, leading to a significant security vulnerability. Binarly detected the leak in early 2023 and released a detailed report outlining the issue. They noted that device makers reused old keys without rotating them, which further exacerbated the problem.
Some affected systems include Alienware gaming desktops and laptops. For these compromised devices, the leak allows malware to execute during system boot, bypassing Secure Boot. Only a direct firmware update can secure these affected devices.
However, brands involved claim they have patched or decommissioned the compromised systems. Binarly’s disclosure aims to inform users about the historical breach and highlight the importance of proper security implementations. The incident emphasizes that even well-designed security features can fail if not correctly executed.
As one of the most popular online games lately, it’s no surprise that Xbox fans…
We've finally reached the month of November, and that means one thing for Xbox users:…
For those who haven't had it on their radar, this week we take a new…
An overclocker from the MSI team has managed to push the Kingston Fury Renegade CUDIMM…
It seems that NVIDIA wants to launch its next products ahead of time. We are…
The trend of upgrading storage from traditional hard drives to SSDs has become increasingly popular,…