Dan Holmes

Security researcher at Google, co-discoverer of CVE-2026-97631

Appears in 1 story

Last updated Oct 28, 2026

Stories

UEFI firmware flaw lets network attackers hijack most servers during boot

New Capabilities

Co-discoverer of the vulnerability

A 16-year-old bug in the firmware that boots most servers lets a network attacker run code before the operating system and Secure Boot load. The flaw sits in TianoCore EDK II, the open-source base behind firmware from AMI, Insyde, Phoenix and Microsoft's Project Mu.

Updated Oct 28