HD Moore

New Capabilities

Commented publicly on exploitation scenarios

A 16-year-old bug in the firmware that boots most servers lets a network attacker run code before the operating system and Secure Boot load. The flaw sits in TianoCore EDK II, the open-source base behind firmware from AMI, Insyde, Phoenix and Microsoft's Project Mu.

Updated Oct 28