NSA Reports on New Cyber Vulnerability in Computers – ExecutiveGov

NSA

The National Security Agency (NSA) has issued a report on a new cyber vulnerability that threatens certain systems present within theDepartment of Defense and other organizations.

TheBootHole vulnerability allows cyber actors to get through the Secure Boot security standard that makes devices boot only with software trusted by original manufacturers, NSA said Thursday.

Cyber terrorists may use this vulnerability to tamper with a device's boot process. Devices running on Linux orWindows 8 and above may be affected by this vulnerability.

NSA provided two mitigation options in theMitigate the GRUB2 BootHole Vulnerability" report for users of Linux, an operating system that uses the Grand Unified Bootloader 2 or GRUB2 affected byBootHole.

For the standard mitigation, the report advises Linux users to update the boot components ofendpoints. The agency will soon release another report for users of Windows and other systems based on the Unified Extensible Firmware Interface.

Read more:

NSA Reports on New Cyber Vulnerability in Computers - ExecutiveGov

Related Post

Comments are closed.