The UEFI Firmware Rootkits - Myths and Reality

Explore the practical implications of UEFI firmware security vulnerabilities in this 58-minute Black Hat conference talk. Delve into the state-of-the-art attacks against UEFI firmware, analyzing their real-world applicability and potential for creating rootkits. Examine the myths and realities surrounding these vulnerabilities, focusing on how they can be exploited to compromise systems at highly privileged levels. Learn about the OS-SMM-SPI Flash attack vector and gain insights from security experts Alex Matrosov and Eugene Rodionov on the current landscape of UEFI firmware threats.