Back Thehackernews

New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards

Thehackernews •[email protected] (The Hacker News) • December 19, 2025

Modern cyberattacks hide in trusted tools and workflows, evading traditional defenses. Zero Trust and AI-powered cloud security give you the visibility and control to stop these invisible threats early.

Agentic AI is accelerating development—and risk. MCP servers and shadow API keys are spreading fast across IDEs. Learn how to regain visibility, enforce control, and secure agentic AI before speed turns into breach.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

UEFI Vulnerability Allows DMA Attacks on Major Motherboard Brands A vulnerability in the UEFI firmware of motherboards from ASUS, Gigabyte, MSI, and ASRock allows direct memory access (DMA) attacks that can bypass early-boot memory protections. The issue has been assigned multiple CVE identifiers (CVE-2025-11901, CVE-2025-14302, CVE-2025-14303, CVE-2025-14304) due to variations in vendor implementations. 4 sources 36

Extracted Entities

New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards

The full story

Extracted Entities

Companies (3)

Platforms (1)

Tools (1)