Firmware Vulnerabilities Continue to Plague Supply Chain

The article explains a rise in firmware and motherboard security issues, highlighting four persistent SMM vulnerabilities in Gigabyte motherboards that originated from AMI firmware fixes not fully propagated to OEMs; it contextualizes the risk with prior UEFI bootkits (Bootkitty, BlackLotus), notes the difficulty of detecting and removing firmware implants, and urges improved tooling, secure-coding practices, and better firmware update/disclosure practices to mitigate persistent, highly privileged firmware threats.