This is a better link (it is Intel's original blog post): https://securingtomorrow.mcafee.com/business/chipsec-support-vault-7-disclosure-scanning/ https://sec

This is a better link (it is Intel's original blog post): https://securingtomorrow.mcafee.com/business/chipsec-support-vault-7-disclosure-scanning/ https://securingtomorrow.mcafee.com/business/chipsec-support... It includes a few more details about what was released: It extracts EFI firmware from flash ROM memory automatically if the firmware file is not specified. We recommend generating an EFI whitelist after purchasing a system or when you are sure it has not been infected: # chipsec_main -m tools.uefi.whitelist -a generate Then check the EFI firmware on your system periodically or whenever you are concerned, such as when a laptop was left unattended: ... An analysis of the approach they are taking would lead to some pretty easy improvements.