insyde

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

A 16-year-old vulnerability in EDK II, the code used to build UEFI firmware, allows an attacker to run code before the operating system loads during network booting. While a fix exists, it hasn't been integrated into sta…