Loading story…
Moxa published a security advisory for Intel BIOS Firmware DoS tracked as INTEL-SA-00813, indicating that affected products received a security enhancement tied to Intel firmware. The notice points customers to vendor support guidance for BIOS-related denial-of-service risk in embedded and industrial devices, underscoring continued supply-chain dependence on upstream chipset and firmware disclosures.
LastPass separately published additional details about Incident 1, expanding on the attack against its environment through its customer support portal. The disclosure adds context to how the intrusion unfolded and reflects ongoing vendor efforts to document impact, attack progression, and remediation steps for customers reviewing the breach and their exposure.
See attribution, scope, and your downstream exposure.
3 events from the most recent confirmed update back to the earliest known activity.
Moxa published security advisory MPSA-256821 addressing a security enhancement related to an Intel BIOS firmware denial-of-service issue tracked as INTEL-SA-00813. The advisory was publicly posted on 2026-01-01.
LastPass released a support article providing additional details about the second incident in its broader 2022 security breach disclosures. The reference indicates the disclosure was publicly available on 2023-03-01.
LastPass released a support article providing additional details about the first incident in its broader 2022 security breach disclosures. The reference indicates the disclosure was publicly available by 2023-03-01.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
3 references tracked. Mallory keeps watching after this page renders.
moxa.com
Open sourcesupport.lastpass.com
Open sourcesupport.lastpass.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**Moxa** published security advisories for its industrial computer **DA Series** indicating that multiple vulnerabilities in underlying **Intel firmware components** can impact affected devices, including conditions leading to **remote denial of service**, **privilege escalation**, and potential **confidentiality** impacts. Affected systems include **DA-682C** (BIOS versions prior to `v1.6`), **DA-820C** (prior to `v1.3`), and **DA-820E** (as listed by CERT-FR), with the Canadian Centre for Cyber Security also flagging DA Series BIOS exposure broadly and calling out DA-682C BIOS `v1.5` and earlier and DA-820C BIOS `v1.2` and earlier. The advisories map to Intel security issues including **Intel BIOS firmware DoS** (**INTEL-SA-00813**) and multiple vulnerabilities in **Intel CSME/AMT** (**INTEL-SA-00391**, **INTEL-SA-00709**). CERT-FR’s notice references related CVEs (including **CVE-2020-8747**, **CVE-2020-8749**, **CVE-2020-8752**, and **CVE-2022-28697**) and directs organizations to apply vendor-provided BIOS updates and mitigations from Moxa’s bulletins (`mpsa-256821`, `mpsa-256822`, `mpsa-256823`) to reduce exposure in operational technology environments.
Jun 29, 2026
Dell disclosed and researchers detailed **CVE-2026-40639** (`DSA-2026-197`), a BIOS password storage weakness that allows administrator and user passwords to be recovered from SPI flash dumps in milliseconds on affected Dell client platforms. The flaw affects the `SystemPwSmm` SMM driver and stems from storing password records in the DVAR region with a reversible repeating 20-byte XOR scheme over a 32-byte field, while leaving the first password character unencrypted. For passwords of 12 characters or fewer, leaked key material is sufficient for deterministic recovery without brute force; researchers also reported that longer passwords are often recoverable because deleted DVAR records are not securely erased and key derivation is limited by device-specific values. Confirmed vulnerable systems include the **Wyse 5070** thin client and reported examples such as the **Latitude E7250**, **Latitude 7490**, and **XPS 15 9560**, although some newer Dell platforms were found to use stronger protections and were not affected. The attack requires physical access to read SPI flash or the ability to boot an attacker-controlled OS, but recovered BIOS credentials could let an attacker change settings tied to **Secure Boot**, boot order, and pre-boot DMA controls, potentially weakening some full-disk encryption assumptions. Dell validated the report after private disclosure, issued patches for some product lines, and said additional fixes were planned, though some confirmed vulnerable devices remained unpatched at publication time.
Jul 13, 2026
Intel issued a broad security update spanning **42 advisories** and **72 vulnerabilities** across processors, firmware, management components, drivers, and software, while a related CPU microcode release fixed **eight processor security issues** affecting product lines including **Xeon 6**, **Core Ultra**, **3rd Gen Xeon Scalable**, and **10th Gen and newer Intel Core** chips. Reported impacts include **escalation of privilege**, **information disclosure**, **denial of service**, and **local code execution**, with several flaws tied to **Intel TDX**, transient execution behavior, firmware control flow, and hardware logic race conditions. The microcode package also added first-time support updates for **Bartlett Lake** and **Wildcat Lake**, alongside non-security functional fixes. Intel's Security Center advisory catalog shows the vendor's updates cover a wide range of platforms, including graphics, wireless, Ethernet, UEFI and server firmware, and developer software such as **oneAPI**, **OpenVINO**, and **Gaudi**, underscoring that the release was part of a larger coordinated remediation effort across Intel's hardware and software ecosystem.
Aug 13, 2026