InfoSecBulletin Cybersecurity for mankind
In 2024, Intel addressed a remarkable 374 vulnerabilities across its software, firmware, and hardware products, distributing bug bounty rewards for approximately half of these issues.
Intel’s latest product security report reveals that the highest number of resolved bugs last year (272) were in utilities (146), drivers (68), applications (35), SDKs (9), toolkits (8), and NUC appliances (5).
WhatsApp banned on all US House of Representatives devices
Kaspersky found “SparkKitty” Malware on Google Play, Apple App Store
OWASP AI Testing Guide Launched to Uncover Vulns in AI Systems
Axentec Launches Bangladesh’s First Locally Hosted Tier-4 Cloud Platform
Hackers Bypass Gmail MFA With App-Specific Password Reuse
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
In 2024, the company fixed 81 firmware flaws, primarily affecting UEFI (30), NUC BIOS (19), networking products (10), and chipsets (8).
Last year, Intel fixed 21 hardware vulnerabilities related to processors, Intel SGX, and side-channel issues, all found internally.
Last year, the number of resolved security defects was 6% higher than in 2023. Intel reported that proactive efforts led to an increase in flaws addressed, with 94% for firmware bugs and 92% for software issues.
The company reported that bug bounty rewards were given for 53% of the 374 vulnerabilities fixed in 2024. Most rewards (84%) were for software flaws, while 16% were for firmware defects.
In recent years Intel has no longer shared information on the bug bounty amounts it has paid out.
Intel’s report reveals that UEFI had the most bug bounties last year, followed by Power Gadget, NUC, NUC BIOS, and networking components.
The tech giant reported 52 platform firmware vulnerabilities, seven issues in its hardware root-of-trust firmware, and 10 GPU flaws last year.
The company updates microcode, firmware, and system BIOS quarterly, allowing partners to validate and implement fixes on a consistent schedule.
