LogoFail Vulnerability Patch

[ScootJ]

@Lmacmil - my understanding is that initial 'infection' is the via same kind of thing as you would normally protect against (viruses, malware etc.). The likelihood of the problem happening is the same as with any other infection, but the impact is way worse.

If you are unlucky, once infected, the malware modifies the boot logo to exploit a long standing problem with the part of the boot process that reads and displays that logo (UEFI)). 

With other threats, even if infected, you have some chance of removing the issue, however, the LogoFAIL vulnerability is so early in the boot process, those protections (SecureBoot, OS Constraints, Anti-virus, etc) haven't even loaded yet, so your PC is wide open to what ever the malware wants to do.  That's why this issue is so dangerous and I felt compelled to reach out to HP through tech support and this forum.

[lmacmil]

Ok, that makes sense.  I thought the infection somehow came during the boot process and that's what I couldn't figure out.  There's a BIOS update out for my Asus motherboard that says it's specifically to mitigate Logofail so I guess I better flash that.  Would be nice if HP was a little more specific about what the latest BIOS update was for but I guess they assume very few users will have heard of Logofail so no need to mention it and potentially generate a bunch of questions.