incus-os

소개 IncusOS는 Incus를 실행하기 위한 불변 OS 이미지입니다. Debian 13을 기반으로 하며 mkosi를 사용하여 빌드되었습니다. IncusOS는 최신 amd64 x8664 및 arm64 시스템에 설치할 수 있습니다. 이는 매우 빠르고 안전하며 신뢰할 수 있는 Incus 서버 실행 방식을 제공하는 것을 목표로 합니다. 보안에 중점을 두고 있으며, 부팅 보안 및 디스크 암호화를 위해 UEFI Secure Boot와 TPM 2.0을 적극적으로 활용합니다. IncusOS 사용을 시작하는 방법에 대한 자세한 내용은 여기...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk は、 概念実証（積極的にメンテナンスや機能拡張は行われていません） の起動可能なイメージであり、GRUB2 ブートローダーを搭載し、リカバリ USB フラッシュドライブのベースとして使用することを目的としています。 主な特徴: このディスクは UEFI Secure Boot モードが有効な状態でも完全に機能します。信頼できない署名、無効な署名、または署名がない場合でも、任意のオペレーティングシステムや .efi ファイルを起動できます。 機能: GRUB2 ブートローダー 3...

CVE-2026-79298

🐞 CVE-2026-79298: Howyar SysReturn における UEFI Secure Boot バイパスの不完全な修復 脆弱性は修正された。バイナリは失効させられた。しかし、修正されたのはアーキテクチャの半分だけであった。18か月後、IA-32 ブートパスは依然として同じカスタム PE ローダーを搭載し、同じ Secure Boot 検証をバイパスし、同じ失効済み Authenticode ハッシュを保持していた。そして2026年7月まで、SysReturn NetCopy のすべてのコピーに商用として出荷され続けていた。これが CVE-2026-79298 である。 ...

CVE-2026-8863

CVE-2026-8863 CVE-2026-8863 の影響を受ける署名済み UEFI Secure Boot shim バイナリのコレクションです。各イメージに埋め込まれた shim バージョン、Authenticode 署名者、失効ハッシュを収録しています。 バイト単位で同一の署名済み shim を同梱するリリースは 1 行に集約されます — 1 つの Authenticode ハッシュは、それを含むリリースの数に関係なく、1 つの dbx エントリです。 詳細は 私のブログ をご覧ください。 概要...

Exploit for CVE-2026-79298

🐞 CVE-2026-79298: Incomplete Remediation of UEFI Secure Boo...

CVE-2026-20293 Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...

Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

A vulnerability in the Unified Extensible Firmware Interface UEFI Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access t...

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three flaws that have been publicly disclosed at the time of release. Of the 206 flaws, 39 are rated Critical, and 167 are rated Important in severity. This includes 63...

CVE-2026-45656 UEFI Secure Boot Security Feature Bypass Vulnerability

...

UEFI Secure Boot Security Feature Bypass Vulnerability

No cwe for this issue in Windows UEFI allows an authorized attacker to bypass a security feature locally...

CVE-2026-0390

Technical details about CVE-2026-0390 are not publicly provided in the available documents. No information on affected product versions, root cause, exploitability, or remediation is included. Monitor for updates from official sources.

KLA90980 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code, cause denial of service, read local...

kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

EUVD-2022-54872

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

EUVD-2020-7693

Malware in sbrugna...

EUVD-2015-7735

Malware in sbrugna...

EUVD-2019-10293

Malware in sbrugna...

EUVD-2022-51399

Malicious code in bioql PyPI...

EUVD-2021-6865

Malicious code in bioql PyPI...

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

Cybersecurity researchers have discovered a new ransomware strain dubbed HybridPetya that resembles the notorious Petya/NotPetya malware, while also incorporating the ability to bypass the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems using a now-patched vulnerabilit...