GIGABYTE confirms UEFI password bypass possible, calls it a design issue

A security issue in the Microsoft Windows Recovery Environment (WinRE) could allow attackers to bypass administrator-configured UEFI or BIOS passwords on GIGABYTE motherboards, potentially undermining firmware security controls and enabling unauthorized access to data. The issue was reported by security researcher Beatriz Fresno Naumova and is tracked as VU#226679. According to CERT/CC, WinRE can reboot … The post GIGABYTE confirms UEFI password bypass possible, calls it a design issue appeared first on CyberInsider.