UEFI Bootkits vs Firmware Implants: Persistence and Detection
Distinguish EFI partition bootkits from SPI flash implants. Learn what disk replacement removes, which evidence to collect, and how Secure Boot updates help.
Firmware Security
5 articles
Taalas HC1 Etches Llama Into Silicon. How Do You Patch a Model Made of Metal?
Taalas' HC1 hardcodes Llama 3.1 8B into silicon for extraordinary inference speed. The same design turns model updates, provenance, and incident response into hardware lifecycle problems.
Forgotten Shims: How 11 Old Microsoft-Signed Files Break Secure Boot
ESET Research found 11 old UEFI shim bootloaders, all validly signed by Microsoft, that bypass Secure Boot on any system trusting Microsoft's third-party CA. CVE-2026-8863 and CVE-2026-10797 — no exploit chain required.
Your Headphones Have Firmware: FOTA Is the IoT Attack Surface Nobody Patches
Bluetooth earbuds, speakers, and IoT devices now ship with firmware update paths, microphones, pairing protocols, and cloud-adjacent features. That does not make every headset a network foothold, but it does make the accessory worth threat-modeling.
Pwnd Blaster: How a $280 Soundbar Becomes a Wireless BadUSB
A Bluetooth flaw in Creative's Sound Blaster Katana V2X lets anyone within 15 meters flash malicious firmware and turn the soundbar into a keystroke-injecting keyboard — no pairing required.