seen from Oman
seen from United States
seen from Russia
seen from Indonesia
seen from United States
seen from United States
seen from China
seen from United States
seen from Oman
seen from Sri Lanka
seen from Czechia
seen from Germany
seen from United States
seen from Brazil
seen from Australia
seen from Australia
seen from Saudi Arabia
seen from Uzbekistan
seen from United States
seen from United States
Critical flaws in Gigabyte firmware let attackers hijack low-level system mode
Binarly researchers found serious bugs in Gigabyte’s UEFI firmware that let attackers corrupt protected memory and run hidden code before your operating system even boots.
Source: Binarly | CERT/CC Read more: CyberSecBrief
Why the Secure Boot Bypass (CVE-2026-21265) is a Gift for Next-Gen UEFI Bootkits
Read the full report on -
CyberDudeBivash News delivers daily cybersecurity threat intel, CVE alerts, malware trends, and crypto security briefings.
CVE-2025-14302 Deep Dive: How "Sleeping Bouncer" Bypasses IOMMU on GIGABYTE, ASUS, and MSI
Read the full report on -
CyberDudeBivash News delivers daily cybersecurity threat intel, CVE alerts, malware trends, and crypto security briefings.
The Enterprise Playbook: 5 Mandatory Steps for Deploying and Managing Secure Boot Across All Devices
Read the full report on -
CyberDudeBivash offers real-time cybersecurity news, threat intelligence, zero-day vulnerabilities, malware reports, and security tools.
CISA'S URGENT MANDATE: The Enterprise Playbook to Fix the UEFI Secure Boot Crisis (The CISO's Firmware Security Guide).
Read the full report on -
CyberDudeBivash offers real-time cybersecurity news, threat intelligence, zero-day vulnerabilities, malware reports, and security tools.
Asus Router Firmware Update Guide
You must know the proper procedure for the Asus router firmware update if you don't know then don't worry, we are here to help you. You must log into the router's interface before starting to update firmware. Just go to the Firmware update section. From here you can easily update the firmware. If you are facing any other problem then visit our website.
https://bit.ly/3MFlbEZ - 🔍 Eclypsium platform recently discovered potential backdoor-like behavior in Gigabyte systems. The firmware in these systems initiates a Windows executable during system startup that insecurely downloads and executes additional payloads. This behavior is reminiscent of past OEM backdoor features exploited by threat actors, such as Computrace backdoor. The issue has been found across hundreds of Gigabyte PC models, signaling a possible supply chain risk. Eclypsium is working closely with Gigabyte to rectify this issue. #CyberSecurity #SupplyChainRisk 📊The primary attack vectors include compromise in the supply chain, local environment compromise, and malware persistence through this firmware functionality. The details of these risks and suggested mitigation strategies will be made available after a typical vulnerability disclosure timeline. #InfoSec #CyberThreats 🔬 Key findings from Eclypsium reveal two main issues: 1) The firmware on Gigabyte systems drops an executable Windows binary during the Windows startup process. 2) This binary insecurely downloads and executes additional payloads from the Internet. As issues like these continue to be discovered, Eclypsium persists in its at-scale analysis of the IT supply chain. #FirmwareSecurity #CyberAttack 🚀 The first stage involves a Windows Native Binary executable embedded within UEFI firmware binary. This executable uses the Windows Native API to write the contents of an embedded executable to the system, similar to methods used by other UEFI firmware implants. The second stage involves the dropped Windows executable, a .NET application, downloading and running further executables. It's noted that remote server certificate validation is not correctly implemented in both HTTP and HTTPS scenarios, raising the risk of MITM attacks. #TechSecurity #MITM 📉The risks include abuse of an OEM backdoor by threat actors, compromise of the OEM update infrastructure and supply chain, UEFI rootkits and implants persistence, MITM attacks on firmware and software update features, and ongoing risk due to unwanted behavior within official firmware. These potential threats underline the importance of security measures in the IT supply chain. #CyberRisk #ITSecurity 🛡️ Eclypsium recommends caution when using Gigabyte systems and taking steps such as scanning and monitoring systems, inspecting and disabling the “APP Center Download & Install” feature in UEFI/BIOS Setup, setting a BIOS password, and blocking certain URLs. These actions can help minimize the risk associated with these backdoor-like behaviors.
