Security research firm Binarly reports that leaked cryptographic keys have compromised hardware from several major vendors in the PC industry, including Dell, Acer, Gigabyte, Supermicro, and even Intel. Eight percent of firmware images released in the last four years are compromised, with 22 untrusted keys discovered immediately.

And according to an Ars Technica post, "more than 200 device models" from these vendors are affected by one particular key that was posted to an open GitHub repository in late 2022.

Binarly is calling the exploit "PKfail." The meat and bones of the situation is that a lot of devices in both the consumer and B2B spaces are now vulnerable to attacks on the boot process. This is one of the most dangerous ways in which a computer can be compromised, though attacks do need to be particularly complex to succeed.

It's the kind of exploit that state-sponsored hackers love, because it's possible to target extreme