CISA republished ABB’s advisory for B&R industrial PCs on May 21, 2026, warning that multiple xPC firmware versions remain exposed to nine PixieFail UEFI network-stack vulnerabilities that can let a network attacker trigger code execution, denial of service, DNS cache poisoning, or data...
Microsoft’s CVE-2026-0390 is another reminder that Secure Boot is only as strong as the trust chain behind it. The vulnerability, described by Microsoft as a UEFI Secure Boot security feature bypass, affects the Windows Boot Loader and is framed as a local issue that could let an authorized...
Microsoft’s CVE-2026-23352 advisory points to a low-level but strategically important UEFI/boot-path issue in the Windows x86 firmware stack, and the key fix — deferring the freeing of boot services memory — suggests the bug sits squarely in the messy transition between firmware-controlled...