Jesse Michael

New Capabilities

Commented on exploitability and patching

A 16-year-old bug in the firmware that boots most servers lets a network attacker run code before the operating system and Secure Boot load. The flaw sits in TianoCore EDK II, the open-source base behind firmware from AMI, Insyde, Phoenix and Microsoft's Project Mu.

Updated Oct 28