MSI security breach - key renewal in BIOS updates coming?

[Deleted member 971612]

MSI confirmed a security breach to Bleeping Computer - https://www.bleepingcomputer.com/ne...ity-breach-following-ransomware-attack-claims .

If any security keys were compromised for existing motherboards, I hope future BIOS releases include updated ones.

 

[artur.aragao@outlook.com.br]

Wooow
Worrisome.

 

[Alan J T]

Just a bit
MSI Global - The Leading Brand in High-end Gaming & Professional Creation

 

[thebradfoste15dd02ea]

Hi, it sounds like Intel Boot Guard private keys were leaked. Does anyone know what a bad actor could do with these private keys? Very worrisome. Being the owner of an MSI laptop, I wonder what my response should be, other than make sure to never source any updates or patches from a source that is not the official website?

Intel investigating leak of Intel Boot Guard private keys after MSI breach

Intel is investigating the leak of alleged private keys used by the Intel BootGuard security feature, potentially impacting its ability to block the installation of malicious UEFI firmware on MSI devices.

www.bleepingcomputer.com

 

[BrotherBelial]

Hi, it sounds like Intel Boot Guard private keys were leaked. Does anyone know what a bad actor could do with these private keys? Very worrisome. Being the owner of an MSI laptop, I wonder what my response should be, other than make sure to never source any updates or patches from a source that is not the official website?

Intel investigating leak of Intel Boot Guard private keys after MSI breach

Intel is investigating the leak of alleged private keys used by the Intel BootGuard security feature, potentially impacting its ability to block the installation of malicious UEFI firmware on MSI devices.

www.bleepingcomputer.com

Basically, nothing unless you download firmware/BIOS updates from anywhere other than an actual MSI web page, or through MSI centre. In a basic sense, these keys tell the CPU that they are genuine and can be run with no problems.

So as I said, unless you get a BIOS update for your laptop from a random website that's not the MSI website, or MSI Centre, you'll be perfectly safe.