MSI - UEFI Signing Keys Leaked

Not a great time for MSI right now, it appears the private key they use to sign their firmware has been leaked. I figured it would be worth mentioning here in case anyone is building a new system and is using MSI, that it may be prudent to avoid BIOS/UEFI updates until MSI calls all clear on the current ones and any new ones that come out and to be doubly sure you are getting it from the official site. I haven’t read any sources that infer that any existing ones available for download may have been compromised but with any major hack it could be something they have still to check and verify.

4 Likes