News [pcworld] windows UEFI secureboot firmware compromised by key leak

[gorobei]

Dell, Acer, Gigabyte, Supermicro, and even Intel affected.
binarly finds Pkfail exploit.

PKfail

The Binarly REsearch team discovered a key leak incident from American Megatrends stemming back to 2018.

www.binarly.io

test keys negligently posted on github

Secure Boot is busted on 200+ PCs from Dell, Acer, Intel, and others

One of the pillars of modern PC security is looking pretty shaky after a cryptographic key was leaked on GitHub.

www.pcworld.com

weakest link in the chain still the human presence.