A TrickBot add-on module's power to destroy devices is more than theoretical, Eclypsium and Advintel said.

Billions of devices are affected, according to Eclypsium.

"Unsigned" firmware continues to haunt the hardware industry.

The access to a computer the attack enables — executing code before the computer is even booted up — is insidious.

Lenovo servers had a conspicuous security problem, but specialists at hardware-security company Eclypsium found that the story was much bigger.