BlackX UEFI bootkit infects fully patched Windows machines, raising Secure Boot questions

·1 views

A UEFI bootkit named BlackX has been found infecting fully patched Windows systems. The malware takes advantage of unclear documentation surrounding Microsoft's Secure Boot protections. The article questions whether Microsoft bears responsibility for gaps in how those safeguards are communicated and understood. Because the attack targets firmware-level boot processes, it can persist beneath the operating system and evade conventional security measures.

Read the full story at Ars Technica

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Sonos app update adds Presets and opens waitlist for AI voice assistant

Sonos is releasing a major app update that introduces Presets, which let users save a specific volume and room for music playback. These Presets appear on the homescreen for quicker access to starting music. US users can join a waitlist for the new Sonos 27voice assistant, with sign-ups opening November 6 and access beginning November 12. The assistant is expected to handle tasks such as starting music, moving playback between rooms, grouping and ungrouping speakers, and setting timers. Sonos says the assistant will also manage more complex requests, though the article text is cut off before details are given.

0 comments Read more at The Verge

TechnologyTechCrunch ·

Data centers turn to repurposed jet engines as grid power waits drag on

Data center builders are facing years-long delays in securing grid connections and new turbines. As a result, some are turning to older jet engines that were previously discarded. This workaround is less efficient and less environmentally friendly than conventional power options. The shift reflects the growing pressure on operators to find power quickly for expanding computing demands. The article highlights the trade-offs between speed of deployment and environmental and efficiency costs.

0 comments Read more at TechCrunch

TechnologyThe Verge ·

Valve Changes Steam Release Checklist as Game Submission Reviews Slow

Valve says it has seen a sharp rise in submissions for store and page reviews in recent months, causing its review times to stretch to as long as 12 business days, compared with the usual 3 to 5. Independent developers have voiced frustration that these lengthy approvals have forced some games to miss planned launch dates. Valve attributes much of the backlog to games needing to be reviewed again. To reduce these repeat reviews over basic functional problems, the company is revising the checklist developers must complete before release.

0 comments Read more at The Verge

TechnologyThe Verge ·

Binance says hackers used fake job interviews and an AI tool in $6.3 billion crypto heist

Binance reports that the largest crypto theft on record was carried out by chaining together familiar hacking methods over several months. According to the company's postmortem, the attack began in June when a developer downloaded a tampered installer, which appears to have been spread through a malicious Google ad. Details about the engineers and their workflows were exposed in the process. In September, a different engineer was approached by someone posing as a recruiter, who conducted multiple calls and interview rounds and shared social media pages to build credibility. The engineer was ultimately persuaded to download a fake interview assignment, which served as the vehicle for the intrusion.

0 comments Read more at The Verge