Microsoft used its AI-powered Security Copilot to discover 20 previously unknown vulnerabilities in the GRUB2, U-Boot, and Barebox open-source bootloaders.

Microsoft used its AI-powered Security Copilot to discover 20 previously unknown vulnerabilities in the GRUB2, U-Boot, and Barebox open-source bootloaders.

Microsoftが独自のAIツールであるSecurity Copilotを活用した新たな分析手法で、GRUB2・U-Boot・bareboxなどのオープンソースのブートローダーに新たな脆弱(ぜいじゃく)性を発見したと報告しています。この取り組みは、セキュリティ分野でのAI活用の一環で、特にファームウェアやブートローダーのような、通常のセキュリティスキャンでは見落とされがちな低レベルソフトウェアの分析に焦点を当てています。

On Wed, 16 Sep 2026 13:07:54 +0000, "Sascha Hauer" wrote Hi all, We have a barebox Release for September, I just released barebox-2026.09.0. This release fixes vulnerabilities in the FIT image cod...

Microsoft's Security Copilot, an AI tool, found 20 new vulnerabilities in open-source bootloaders like GRUB2, U-Boot, and Barebox. Eleven flaws were found in GRUB2, the bootloader for many Linux distributions, including buffer overflows and cryptographic weaknesses. U-Boot and Barebox, used in embedded devices, had nine buffer overflows, primarily in filesystem parsing. These vulnerabilities could potentially allow attackers to bypass security measures and execute arbitrary code. Exploiting these flaws likely requires local access, but historical attacks show how malware can achieve this. Microsoft worked with maintainers to address the issues and contributed fixes, with updates released in February 2025. The AI tool significantly sped up the vulnerability discovery process, saving the team a week of manual work. Microsoft highlights the crucial role of information sharing in the cybersecurity community as AI advances. This approach helps counter malicious actors' use of AI for escalating attacks. Google also recently announced Sec-Gemini v1, an AI model for advancing cybersecurity. Microsoft emphasizes the importance of AI in rapid vulnerability detection, remediation, and security operations to counter malicious activities.

Learn about CVE-2024-57260, CVE-2024-57261, & CVE-2024-57262 and their impact on Barebox bootloader vulnerabilities affecting embedded systems' security

affected by the recently found vulnerabilities read more about Microsoft uses AI to find flaws in GRUB2 U-Boot Barebox bootloaders

Posted by Richard Weinberger on Feb 17 ## Summary - *Identifier:* sigma-star-sa-2024-003 - *Vendor:* - - *Product/Software:* [Barebox]( https://barebox.org ) - *Affected versions:* < v2025.01.0 - *Fixed versions:* v2025.01.0 - *CVE IDs:* CVE-2024-57260, CVE-2024-57261, CVE-2024-57262 ## Affected Product and Vendor Source: https://barebox.org/ ## Description Multuple vulnerabilities...

Microsoft used its AI-powered Security Copilot to discover 20 previously unknown vulnerabilities in the GRUB2, U-Boot, and Barebox open-source bootloaders.

We faced a heatwave, but we still kept going: Barebox bootloader release, MNT Quasar 6490 launch, Pocket Reform mainboard 2.0 in production are just three examples of our accomplishments this month.

Using Microsoft Security Copilot to expedite the discovery process, Microsoft has uncovered several vulnerabilities in multiple open-source bootloaders impacting all operating systems relying on Unified Extensible Firmware Interface (UEFI) Secure Boot. Through a series of prompts, we identified and refined security issues, ultimately uncovering an exploitable integer overflow vulnerability in the GRUB2, U-boot, and Barebox bootloaders.

Microsoft is reporting that its AI systems are able to find new vulnerabilities in source code: Microsoft discovered eleven vulnerabilities in GRUB2, including integer and buffer overflows in filesystem parsers, command flaws, and a side-channel in cryptographic comparison. Additionally, 9 buffer overflows in parsing SquashFS, EXT4, CramFS, JFFS2, and symlinks were discovered in U-Boot and Barebox, which require physical access to exploit. The newly discovered flaws impact devices relying on UEFI Secure Boot, and if the right conditions are met, attackers can bypass security protections to execute arbitrary code on the device...

Learn about CVE-2024-57260, CVE-2024-57261, & CVE-2024-57262 and their impact on Barebox bootloader vulnerabilities affecting embedded systems' security