InfoSecBulletin Cybersecurity for mankind
In 2024, Intel addressed a remarkable 374 vulnerabilities across its software, firmware, and hardware products, distributing bug bounty rewards for approximately half of these issues.
Intel’s latest product security report reveals that the highest number of resolved bugs last year (272) were in utilities (146), drivers (68), applications (35), SDKs (9), toolkits (8), and NUC appliances (5).
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
500+ critical infrastructure hit by Medusa ransomware
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
In 2024, the company fixed 81 firmware flaws, primarily affecting UEFI (30), NUC BIOS (19), networking products (10), and chipsets (8).
Last year, Intel fixed 21 hardware vulnerabilities related to processors, Intel SGX, and side-channel issues, all found internally.
Last year, the number of resolved security defects was 6% higher than in 2023. Intel reported that proactive efforts led to an increase in flaws addressed, with 94% for firmware bugs and 92% for software issues.
The company reported that bug bounty rewards were given for 53% of the 374 vulnerabilities fixed in 2024. Most rewards (84%) were for software flaws, while 16% were for firmware defects.
In recent years Intel has no longer shared information on the bug bounty amounts it has paid out.
Intel’s report reveals that UEFI had the most bug bounties last year, followed by Power Gadget, NUC, NUC BIOS, and networking components.
The tech giant reported 52 platform firmware vulnerabilities, seven issues in its hardware root-of-trust firmware, and 10 GPU flaws last year.
The company updates microcode, firmware, and system BIOS quarterly, allowing partners to validate and implement fixes on a consistent schedule.
