firmware security

CVE-2026-63958 is a newly cataloged Linux kernel vulnerability in the USB Type-C Connector System Software Interface, or UCSI, code that deserves attention well beyond the usual Linux security mailing lists: a malformed connector-change notification from firmware or a USB-C controller can cause...

Windows 11’s coordinated-update concept is an experimental Insider capability, not a generally available enterprise servicing policy. Enterprises should prepare to coordinate routine, validated Windows, .NET, and driver updates where management controls permit, while keeping firmware on a...

Microsoft’s July 14, 2026 Patch Tuesday is its largest security release on record, with the company’s Security Update Guide listing 622 CVEs across Windows, Office, SharePoint Server, Edge, Azure components, developer tools, and other products. That is more than triple June’s already unusual...

CVE-2026-48581 exposes a local elevation-of-privilege path across multiple Microsoft Surface product lines, including Surface Pro 8, Surface Laptop 4, Surface Laptop Go 3, Surface Go, Surface Hub, and Windows Dev Kit devices. Microsoft published the vulnerability on July 14, 2026, assigning it a...

Secure Boot certificates protecting older Windows PCs reached their expiration date on June 24, and Microsoft widened its automatic certificate-upgrade effort that same day, leaving many Windows 10 users unsure whether their machines had been updated, remained secure, or were quietly falling...

CISA on July 2, 2026, published an industrial control systems advisory for CubeSpace’s CW0057 Reaction Wheel, warning that firmware before version 5.0.20 can accept malicious replacement firmware because it does not cryptographically verify update authenticity. The affected device is not a...

AMD confirmed in June 2026 that it will restore the BIOS option for AMD Memory Guard, also known as Transparent Secure Memory Encryption, on certain non-PRO Ryzen 9000 desktop processors through motherboard firmware updates expected in July 2026. The reversal matters less because most gamers...

Microsoft is replacing the original 2011 Secure Boot certificate chain across Windows PCs and servers before certificates begin expiring in June 2026 and continue expiring into October, affecting supported Windows 10, Windows 11, and Windows Server systems that still trust those aging boot...

Microsoft Azure CTO Mark Russinovich fed a four‑decade‑old Apple II binary into Anthropic’s Claude Opus 4.6 and watched the model not only decompile the 6502 machine code but also flag real, fixable bugs — a small, nostalgic demonstration with outsized implications for how AI will change...

Mark Russinovich, Microsoft Azure’s chief technology officer, has quietly turned a 40‑year‑old Apple II utility he wrote as a teenager into a sobering demonstration: modern large language models can decompile raw machine code, reason about its control flow, and surface real bugs in...

Mark Russinovich's thirty‑plus‑year‑old Apple II utility has become an unlikely canary in a rapidly evolving threat: modern large language models can reverse engineer raw machine code and surface latent bugs — even in 6502 binaries typed into a magazine in 1986 — and that capability both helps...

Microsoft has quietly begun a platform-level refresh of the cryptographic anchors that protect Windows’ pre‑boot environment, delivering new Secure Boot certificates through Windows Update and coordinated OEM firmware work to head off a calendar‑driven failure when Microsoft’s original UEFI...

Jinan USR IOT Technology’s USR‑W610 serial‑to‑Wi‑Fi/ Ethernet converter is the subject of a high‑severity Industrial Control Systems advisory that names four vulnerabilities (CVE‑2026‑25715, CVE‑2026‑24455, CVE‑2026‑26049, CVE‑2026‑26048) affecting firmware releases up to and including version...

Das U‑Boot contained a dangerous stack‑based buffer overflow in its NFS reply handling code — tracked as CVE‑2019‑14204 — that affects all upstream releases up through 2019.07 and can be triggered when a crafted NFS/UDP response is parsed by the bootloader’s nfs_handler helper...

Boot firmware that writes or reads pointers from untrusted non‑volatile variables is a high‑risk pattern — CVE‑2021‑28216 is a classic example: an EDK II (TianoCore) implementation reads the BootPerformanceTable pointer from an NVRAM variable during PEI (Pre‑EFI Initialization), and multiple...

Your PC’s ability to boot tomorrow depends on digital trust decisions made years ago — and those cryptographic certificates are about to reach their end-of-life in mid‑2026 unless your machine has already been updated. Background: why this matters now Secure Boot is the pre‑OS gatekeeper that...

Microsoft will begin delivering a coordinated refresh of Secure Boot certificates through Windows Update in March 2026, a multi‑stage effort designed to replace the aging 2011 trust anchors before they begin expiring in mid‑2026 and to preserve pre‑boot security and updateability across millions...

Microsoft has issued a coordinated warning: the original Secure Boot certificates that have underpinned Windows platform integrity since 2011 are reaching the end of their lifecycle, and a deliberate, ecosystem-wide refresh is required before mid‑2026 to avoid a progressive loss of...

IT administrators now have practical, fleet-scale ways to check whether Windows devices are carrying the updated Secure Boot certificate chain and whether they’re ready to accept the upcoming Secure Boot updates — a crucial capability as Microsoft and OEMs rotate the platform’s cryptographic...

Microsoft quietly closed the book on another long‑running Windows codebase this week — the Vista‑era Server 2008 line reached the absolute end of vendor updates after 18 years — even as a handful of high‑profile patches, rollbacks and component updates kept administrators busy: Microsoft shipped...