Critical UEFI firmware flaw leaks early, leaving servers waiting for a fix
A critical flaw in the firmware that starts most servers can let an attacker run code before the operating system loads. It sits in EDK II, the open-source code most firmware makers use to build UEFI firmware.
Read the full story on The Next Web.