MSI UEFI key breach: How safe are YOUR secrets?

Last month’s MSI data theft is causing panic. Some extremely sensitive signing keys have been found among the leaked data drifting through the dark web.

Devs need to ask if any of their dev, test, source, build or prod machines might be vulnerable. Bad actors are no doubt already building signed bootkits that subvert operating system controls from underneath.

If nothing else, there are important lessons to learn from MSI’s mistake. In this week’s Secure Software Blogwatch, we lock …

bad bad actors breach build dark dark web data data theft dev key keys leaked machines msi panic prod safe secrets signing test theft uefi vulnerable web