VU#211341 - A vulnerability in Insyde H2O UEFI application allows for digital certificate injection via NVRAM variable
Eggs in a Cloudy Basket: Skeleton Spider’s Trusted Cloud Malware Delivery - DomainTools Investigations | DTI