RE: https://infosec.exchange/@hdm/117516257059644453
here I was today thinking, that PHP thing was kind of dumb, because first of all, PHP, second of all, it was a one off that's possibly not even practically exploitable , people are freaking out a little too much about the overall "oh no endless 9/10 vulnerabilities for years!" but here we are and this looks kind of worse
Code-execution flaw in UEFI firmware affects most servers on planet Earth: https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/ This is an interesting bug for a few reasons: - In part of the code that was heavily f
Infosec ExchangeHD Moore (@[email protected])Attached: 1 image
Code-execution flaw in UEFI firmware affects most servers on planet Earth: https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/
This is an interesting bug for a few reasons:
- In part of the code that was heavily fuzzed (but ICMP was skipped)
- In the reference SDK used by huge amounts of downstream firmware
- Ex