Widespread Vulnerability: LogoFAIL Exploit Threatens Windows and Linux Devices
Researchers have discovered a series of vulnerabilities, known as LogoFAIL, in the Unified Extensible Firmware Interfaces (UEFIs) of Windows and Linux devices. These vulnerabilities allow for the undetectable installation of malicious code during the boot process by replacing legitimate logo images with specially crafted ones. The vulnerabilities affect UEFI suppliers, device manufacturers, and CPU makers. Once arbitrary code execution is achieved, attackers have full control over the device's memory and disk, including the operating system. The best defense against LogoFAIL attacks is to install UEFI security updates and configure multiple layers of defenses, such as Secure Boot and Intel Boot Guard.
- Nearly Every Windows and Linux Device Vulnerable To New LogoFAIL Firmware Attack Slashdot
- Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack Ars Technica
- New LogoFAIL exploit leaves Windows and Linux users vulnerable to remote attacks TechSpot
- Major security flaw LogoFAIL discovered in almost every Windows & Linux device Dexerto
- Pretty much all Windows and Linux computers are vulnerable to this new cyberattack TechRadar
Reading Insights
0
1
2 min
vs 3 min read
82%
564 → 101 words
Want the full story? Read the original article
Read on Slashdot