ESET Research discovers vulnerabilities in Lenovo consumer laptops exposing users to risk of UEFI malware installation

Exploitation of these vulnerabilities would allow attackers to deploy and successfully execute UEFI malware such as LoJax and ESPecter. UEFI threats can be extremely stealthy and dangerous. · Discovered vulnerabilities: CVE-2021-3970, CVE-2021-3971, CVE-2021-3972. ESET Research strongly advises all owners of Lenovo consumer laptops to go through the list of affected devices and update their firmware. … More ESET Research discovers vulnerabilities in Lenovo consumer laptops exposing users to risk of UEFI malware installation

Hacking wireless mice: If it controls something, it can be abused

A cybersecurity company called Bastille, from San Francisco has been doing some experimenting with hacking wireless mice and uncovered a flaw they say leaves millions of networks and billions of computers vulnerable to attack. It turns out that wireless mice from companies like HP, Lenovo, Amazon and Dell use unencrypted signals to communicate with computers. … More Hacking wireless mice: If it controls something, it can be abused