Submission + - Microsoft uses AI to find flaws in GRUB2, U-Boot, Barebox filesystems (bleepingcomputer.com) 1
zlives writes: seems to need physical access with perhaps the exception of GRUB.
from the MS source https://www.microsoft.com/en-u...
"Using Security Copilot, we initially explored which functionalities in a bootloader have the most potential for vulnerabilities, with Copilot identifying network, filesystems, and cryptographic signatures as key areas of interest. Given our ongoing analysis of network vulnerabilities and the fact that cryptography is largely handled by UEFI, we decided to focus on filesystems."
it seems they ignored network and encryption so possible there are additional things to be discovered.
from the MS source https://www.microsoft.com/en-u...
"Using Security Copilot, we initially explored which functionalities in a bootloader have the most potential for vulnerabilities, with Copilot identifying network, filesystems, and cryptographic signatures as key areas of interest. Given our ongoing analysis of network vulnerabilities and the fact that cryptography is largely handled by UEFI, we decided to focus on filesystems."
it seems they ignored network and encryption so possible there are additional things to be discovered.
