EDK II flaw risks boot time attacks, while LiteLLM scores CVSS 10

SANS Internet Storm Center reports that Brad in the Diaries captured another ClickFix campaign that uses fake Cloudflare verification pages and targets both macOS and Windows, with multiple URLs identified for threat hunting, though the specific malware payload was not retrieved. The episode notes this campaign repeatedly, providing indicators of compromise for defenders to track, but does not detail a concrete exploit or widespread impact beyond the deception technique observed.

In the broader briefing, the host discusses a pre-boot remote code execution vulnerability in the EDK II PXE driver. The flaw could enable remote code execution if an ICMP error message is received during OS boot, potentially bypassing secure boot. The vulnerability affects millions of systems that use PXE booting, though the attacker would need to trigger a reboot or timing to exploit the brief boot window; ongoing DoS conditions could increase opportunities.

The discussion also covers AI data exfiltration concerns from running local models, noting Cohere researchers’ findings with the Qwen Chinese model potentially leaking data to Alibaba storage locations via URLs exposed to tools like curl, with uncertainty over whether this results from training data leftovers or a broader design issue.

Finally, the briefing highlights a LiteLLM vulnerability rated CVSS 10, an arbitrary file read that could expose credentials and master keys stored by the proxy used to access various AI models, underscoring the need to update LiteLLM and consider trust boundaries for proxy users.