[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuHVaMcNi1lNWZDN_iyvpbS07qq9xkPovfNY-8U1_k6A":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"3a85bd97-2027-4ec2-9d97-f0df1013da1e","New U-Boot flaws could enable stealthy firmware attacks","new-u-boot-flaws-could-enable-stealthy-firmware-attacks-3876d9","Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections and install persistent malware. [...]","Six new vulnerabilities have been discovered in the widely used open-source U-Boot bootloader, potentially allowing attackers to execute malicious code during the device boot process. These flaws, found in the FIT signature verification code, could enable stealthy firmware attacks, compromise security protections, and install persistent malware before the operating system even loads. The vulnerabilities, some of which have existed since U-Boot version 2013.07, impact numerous embedded Linux devices across various industries.","Six U-Boot bootloader flaws could enable stealthy firmware attacks and malware installation.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnew-u-boot-flaws-could-enable-stealthy-firmware-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2022\u002F06\u002F02\u002Fcpu-motherboard.jpg","2026-07-10T21:59:02+00:00","2026-07-10T22:00:20.097253+00:00",9,[17,20,23,25,27],{"name":18,"type":19},"U-Boot","product",{"name":21,"type":22},"firmware","technology",{"name":24,"type":22},"bootloader",{"name":26,"type":22},"FIT (Flattened Image Tree)",{"name":28,"type":29},"Binarly","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,38,43,48],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[28,18],{"controls":56,"vendors":143},[57,86,114],{"slug":58,"name":59,"problem":60,"products":61},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":87,"name":88,"problem":89,"products":90},"patch-management","Automated patch management","Known holes get closed in days, not months.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":87,"product_name":111,"url":112,"description":113},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":115,"name":116,"problem":117,"products":118},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[119,127,135],{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":136,"vendor_name":137,"vendor_logo":138,"product_slug":139,"product_name":140,"url":141,"description":142},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",[],{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":159},"u-boot-bootloader-flaws-enable-pre-os-firmware-compromise","U-Boot Bootloader Flaws Enable Pre-OS Firmware Compromise","Six vulnerabilities in the U-Boot bootloader's FIT signature verification code expose embedded Linux devices to stealthy firmware attacks that can execute malicious code before the operating system even loads, making detection extremely difficult. Some of these flaws have persisted undetected since 2013, highlighting a critical gap in vulnerability management for open-source firmware dependencies embedded deep in the supply chain. Because bootloader-level malware can survive OS reinstalls and evade traditional endpoint security tools, the persistence and stealth potential is exceptionally high. This matters because affected devices span numerous industries — including IoT, industrial control systems, and networking hardware — creating a broad and largely unpatched attack surface.",[149,150,151,152,153,154,155,156,157,158],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 16 – Application Software Security","NIST SP 800-193 – Platform Firmware Resiliency Guidelines","NIST SP 800-161 – Supply Chain Risk Management","NIST SI-2 – Flaw Remediation","NIST SA-12 – Supply Chain Protection","NIST SI-7 – Software, Firmware, and Information Integrity","IEC 62443-2-4 – Security for Industrial Automation and Control Systems","ITIL Change Management – Emergency Change Procedures",{}]