CISA Issues a Call to Action for Improved UEFI Security

On August 3, 2023, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a call to action addressing the challenges we face securing UEFI and responding to incidents where attackers have leveraged weaknesses in UEFI implementations. The article “A Call to Action: Bolster UEFI Cybersecurity Now” underscores the importance of securing the UEFI ecosystem. 

CISA stated what we here at Eclypsium have long believed: UEFI represents an important software component of a critical attack surface that must be …

action agency article attackers august bolster call call to action challenges cisa cybersecurity incidents infrastructure infrastructure security security uefi weaknesses