Bug Bounty

ESET researchers have discovered and analyzed three vulnerabilities affecting various Lenovo consumer laptop models. The exploitation of these vulnerabilities would allow attackers to deploy and successfully execute UEFI malware either in the form of SPI flash implant like LoJax or UEFI bootkit like the latest discovery ESPecter. ESET reported all discovered vulnerabilities to Lenovo in October 2021. Altogether, the list of affected devices contains more than one hundred different laptop models with millions of users worldwide.

https://australiancybersecuritymagazine ... o-laptops/