incus-os

はじめに IncusOS は、Incus を実行するためのイミュータブルOSイメージです。 Debian 13 をベースにしており、mkosi を使用して構築されています。 IncusOS は、最新の amd64 x8664 および arm64 システムにインストールできます。 これは、Incus サーバーを非常に高速かつ安全で信頼性の高い方法で実行することを目的としています。 セキュリティに重点を置いており、ブートセキュリティとディスク暗号化のために UEFI Secure Boot と TPM 2.0 を積極的に利用しています。 IncusOS の使い方については、 こちら...

Super-UEFIinSecureBoot-Disk

超级UEFI安全启动盘 Super UEFIinSecureBoot Disk 是一个概念验证（未积极维护或增强）的可启动映像，带有GRUB2引导加载程序，旨在用作恢复USB闪存盘的基础。 关键特性： 该磁盘在启用UEFI安全启动模式下完全可用。它可以启动任何操作系统或.efi文件，即使签名不受信任、无效或缺失。 特性： GRUB2 Bootloader 支持32位（ia32）/64位（x8664）UEFI（+安全启动） 支持BIOS / UEFI CSM 启动任何操作系统 从GRUB2启动任何.efi可执行文件 从另一个.efi应用程序启动任何.efi可执行文件 加载任何UEFI驱动程...

CVE-2026-8863

CVE-2026-8863 受到 CVE-2026-8863 影响的已签名 UEFI Secure Boot shim 二进制文件集合，包含每个映像的嵌入 shim 版本、Authenticode 签名者和吊销哈希值。 发布版本中如果包含字节完全相同的已签名 shim，则合并为一行——一个 Authenticode 哈希对应一个 dbx 条目，无论有多少个发布版本携带它。 详情请查看我的博客。 概览 发行版| 版本| shim| 嵌入厂商 CA ---|---|---|--- CentOS| 7.2, 7.3| 0.9| Red Hat Inc. Fedora| Server 24-1....

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three flaws that have been publicly disclosed at the time of release. Of the 206 flaws, 39 are rated Critical, and 167 are rated Important in severity. This includes 63...

CVE-2026-45656 UEFI Secure Boot Security Feature Bypass Vulnerability

...

UEFI Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows UEFI allows an authorized attacker to bypass a security feature locally...

CVE-2026-0390

Technical details about CVE-2026-0390 are not publicly provided in the available documents. No information on affected product versions, root cause, exploitability, or remediation is included. Monitor for updates from official sources.

KLA90980 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code, cause denial of service, read local...

kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

EUVD-2022-54872

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

EUVD-2020-7693

Malware in sbrugna...

EUVD-2015-7735

Malware in sbrugna...

EUVD-2019-10293

Malware in sbrugna...

EUVD-2022-51399

Malicious code in bioql PyPI...

EUVD-2021-6865

Malicious code in bioql PyPI...

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

Cybersecurity researchers have discovered a new ransomware strain dubbed HybridPetya that resembles the notorious Petya/NotPetya malware, while also incorporating the ability to bypass the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems using a now-patched vulnerabilit...

SUSE CVE-2022-49357

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

CVE-2022-49357

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

CVE-2022-49357 efi: Do not import certificates from UEFI Secure Boot for T2 Macs

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

CVE-2022-49357 efi: Do not import certificates from UEFI Secure Boot for T2 Macs

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...