Vuln BIOS rootkit preloaded in ~60% of new laptops

Keldrin_1 writes: Researchers Alfredo Ortega and Anibal Sacco, from Core Security Technologies, have discovered a vulnerability in the "Computrace LoJack for Laptops" software. This is a BIOS level application that calls home for instructions in case the laptop is ever lost or stolen. However, what the application considers "home" is subject to change. This allows the creation of malware that is capable of "infecting the BIOS with persistent code that survive reboots and reflashing attempts". Computers from Dell, Lenovo, HP, Toshiba, Asus, and others may be affected.