"Unsigned" firmware continues to haunt the hardware industry.

The access to a computer the attack enables — executing code before the computer is even booted up — is insidious.

Lenovo servers had a conspicuous security problem, but specialists at hardware-security company Eclypsium found that the story was much bigger.