2026-06-11 09:04 UTC
Most FDE vendors/projects don't consider vectors requiring repeated physical access as a vulnerability.
But there is another side to this: an HDD/SSD firmware backdoor (or a network attacker injecting arbitrary data into a disk image booted over the network) has a way to inject attacker-controlled data into an encrypted volume despite code integrity controls like Secure Boot and TPM-based unlocks (the "Implementation and Implications of a Stealth Hard-Drive Backdoor" paper told us the opposite).
In one MSRC case, Microsoft agreed to treat the data-only attack against BitLocker from the storage path as a vulnerability.
Replies (0)
No replies.