UEFI Vulnerability Bypasses Secure Boot, Leaves Bootkits Undetected
A new UEFI vulnerability (CVE-2024-7344) discovered by Bleeping Computer allows attackers to bypass Secure Boot and deploy bootkits that can remain undetected even after an OS re-install. The vulnerability affects multiple system recovery tools, including Howyar SysReturn, Greenware GreenGuard, and Radix SmartRecovery. The exploit relies on a customer PE loader that enables the loading of … Read more