Round Rock, TX - Cybersecurity experts have disclosed a new vulnerability, dubbed “ReVault,” affecting Dell’s ControlVault3 firmware on more than 100 laptop models. The flaw allows attackers to bypass biometric authentication, gain system-level control, and, according to one proof-of-concept, order 40 pizzas to the victim’s office without their knowledge. The attack works by exploiting a firmware routine originally intended to store secure encryption keys — instead tricking it into executing arbitrary instructions, such as launching the Minesweeper game at full screen during investor meetings. “It’s technically a breach, but also kind of a performance art piece,” one researcher noted. Industry analysts warn that widespread...
