We do not believe this exposes any new security vulnerabilities as we do not rely on obfuscation of information as a security measure. “Our proprietary UEFI code appears to have been leaked by a third party. In a statement issued to Tom’s Hardware, Intel said: Initially, it was uncertain whether the leaked file was the real deal, but Intel itself has now confirmed that to be the case. The BIOS plays an important role in any computer, so it’s certainly not good that the source code for it could now be in the hands of nefarious threat actors. As such, it’s responsible for establishing secure connections to important mechanisms within the computer, such as the Trusted Platform Module (TPM). The BIOS/UEFI source code is responsible for initializing the hardware even before the operating system has the chance to load. Seeing as these are some of the best processors out currently, this could potentially put a lot of Intel’s customers at risk. The 6GB file contains some of the tools and code that Intel has used to build the BIOS/UEFI in its Alder Lake CPUs. News of the leak broke out a couple of days ago when the code was found in a public GitHub repository, as well as shared on 4chan. I can't believe: NDA-ed MSRs, for the newest CPU, what a good day… /bNitVJlkkL If you own an Alder Lake CPU, should you be worried? Intel doesn’t seem too concerned, but security researchers are now hard at work trying to see if this can be used in a malicious way. A total of 6GB of code used for building the BIOS/UEFI source code is now out in the wild, having been posted on GitHub and 4chan. It’s official - the source code for the Intel Alder Lake BIOS was leaked, and Intel has confirmed it.
0 kommentar(er)
