Gigabyte has released BIOS updates aimed at removing a firmware backdoor discovered by Eclypsium in over 270 of its motherboard models, which could have been exploited to facilitate the deployment of a Windows binary that would then prompt payload retrieval and execution, SecurityWeek reports. Aside from addressing reported download assistant flaws, the updates also feature more robust verification for files downloaded from remote servers and standard remote server certificate verification, which would prevent malicious code injections during the booting process, as well as ensure that downloaded files are from secure servers.

Source: SC Magazine