New UEFI Firmware Flaws Reported in Several Lenovo Notebook Models | allinfosecnews.com

Nov. 10, 2022, 6:36 a.m. | noreply@blogger.com (Ravie Lakshmanan)

The Hacker News thehackernews.com

PC maker Lenovo has addressed yet another set of three shortcomings in the Unified Extensible Firmware Interface (UEFI) firmware affecting several Yoga, IdeaPad, and ThinkBook devices.
"The vulnerabilities allow disabling UEFI Secure Boot or restoring factory default Secure Boot databases (incl. dbx): all simply from an OS," Slovak cybersecurity firm ESET explained in a series of tweets.
UEFI

firmware flaws lenovo notebook uefi uefi firmware

More from thehackernews.com / The Hacker News

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users 3 hours ago | thehackernews.com

app apps baidu chinese +22

CISO Perspectives on Complying with Cybersecurity Regulations 3 hours ago | thehackernews.com

accountability ciso cisos compliance +22

eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners 6 hours ago | thehackernews.com

actor antivirus antivirus software avast +22

CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers 8 hours ago | thehackernews.com

actor cache campaign cdn +20

Apache Cordova App Harness Targeted in Dependency Confusion Attack 23 hours ago | thehackernews.com

actor apache app attack +21

Webinar: Learn Proactive Supply Chain Threat Hunting Techniques 1 day, 1 hour ago | thehackernews.com

attacks breach cybersecurity defenses +23

Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases 1 day, 2 hours ago | thehackernews.com

access action call called +30

Unmasking the True Cost of Cyberattacks: Beyond Ransom and Recovery 1 day, 2 hours ago | thehackernews.com

beyond breaches businesses can +15

German Authorities Issue Arrest Warrants for Three Suspected Chinese Spies 1 day, 3 hours ago | thehackernews.com

arrest china chinese federal +9

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Team Lead, Security Operations Center, Cyber Risk

@ Kroll | United Kingdom

View on infosec-jobs.com

Cyber Security Risk Analyst

@ College Board | Remote - Virginia

View on infosec-jobs.com

Lead - IT Security Engineer

@ Bosch Group | BENGALURU, India

View on infosec-jobs.com

Project Cybersecurity Manager

@ Alstom | Bengaluru, KA, IN

View on infosec-jobs.com

Security Consultant

@ CloudSEK | Bengaluru, Karnataka, India

View on infosec-jobs.com