NEW LENOVO UEFI FIRMWARE UPDATES FIX SECURE BOOT BYPASS FLAWS

Summary from the TLDR InfoSec newsletter

Lenovo is warning users about new high-severity BIOS flaws that could allow attackers to bypass Secure Boot on some IdeaCentre AIO and Yoga AIO models. The vulnerabilities may enable local attackers to execute arbitrary code in System Management Mode (SMM), a CPU mode that operates independently from the OS and hypervisor, allowing them to plant “undetectable” malware that bypasses OS-level defenses.