Microsoft has released a security report stating that 83% of all companies have had their device firmware attacked in the last two years.
This shows us that security managers in companies need to be constantly on the lookout for specific attacks and secure their systems.
The subject aroused my curiosity when I saw the following tweet
We commissioned a study that found that more than 80% of enterprises have experienced at least one firmware attack in the past two years. Learn more about the findings and options for securing firmware and hardware with secured-core PCs: https://t.co/9C9bxlPQQL
- Microsoft Security (@msftsecurity) March 30, 2021
The tweet links to an article from the company titled: “New Security Signals study shows firmware attacks on the rise; here's how Microsoft is working to help eliminate this entire class of threats”.
As proof, Microsoft cites its new Security Signals report, which looks at attack scenarios.
Microsoft says threats are changing because many systems are protected by the cloud. The "Security Signals" report indicates that firmware attacks are on the rise - and companies are not paying enough attention to safeguarding them. The Security Signals report surveyed 1.000 corporate security professionals and reported that 83% of companies have been hit by firmware attacks in the past two years. But according to the same report, only 29% of security budgets will be invested in safeguarding these attacks. Of course the company promotes Secured-Core PCs
"There are two types of companies - those that have been attacked by firmware and those that have been attacked by firmware but do not know it," said Azim Shafqat, an ISG partner and former Gartner vice president.
It should be mentioned here that the company's publication is a bit advertising since it mentions how secure Microsoft services are. So because I'm probably not the only one who thought that 83% is a very high percentage see the following tweet
No, 81% of enterprises have not experienced a PC firmware attack of the kind Secured-Core PCs are supposed to make harder in the last two years. I would bet my life on it.
- Brian in Pittsburgh (@arekfurt) March 30, 2021
These claims are so misleading as to effectively amount to lying. pic.twitter.com/hpQwO9Ouxf
Brian in Pittsburgh reports
"No, 81% of companies have not been attacked by firmware… .. I bet my life on it.
"These allegations are so misleading that they are tantamount to lies."
George is still wondering what he is doing here….
