Feed›Vulnerability›Unpatched HP ThinPro flaw allows bypass of disk encryption p...
VulnerabilityCyber Insider
6.1 — HIGH

Unpatched HP ThinPro flaw allows bypass of disk encryption protections

📅 10 August 2026 at 16:12 UTC📰 Cyber InsiderView original source ↗
Unpatched HP ThinPro flaw allows bypass of disk encryption protections

An unpatched vulnerability in HP ThinPro 8 and 9 allows attackers with physical access to bypass the operating system’s TPM-backed full-disk encryption protections and recover the key securing the device’s root partition. The zero-day remained without a publicly available fix when researcher Darren McDonald disclosed it on August 8, nearly six months after first reporting … The post Unpatched HP ThinPro flaw allows bypass of disk encryption protections appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

A zero-day vulnerability in HP ThinPro allows attackers with physical access to bypass disk encryption protections, potentially recovering the encryption key and accessing sensitive data. The vulnerability was discovered by researcher Darren McDonald in early 2026.

⚙️Technical Details
Affected Systems
HP ThinPro 8HP ThinPro 9
Attack Vectors
Physical access to the device's storageModifying the initramfs without changing PCR values required by the TPM
💥Impact Assessment
Severity: critical
Who Is at Risk
Organizations using HP ThinPro in enterprise environments such as virtual desktop deployments, call centers, healthcare facilities, kiosks, and other centrally managed workplacesSeverity: critical
🛡️Recommended Actions
1Enable Secure Boot
2Configure a BIOS password to make physical tampering harder
3Securely destroy or erase the M.2 storage for systems being retired
📦Affected Products
HP ThinPro 8HP ThinPro 9

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗
← Back to feed