Firmware bugs are like buses
Created: 23 Nov 2017
Author: Mike H
[…]These vulnerabilities serve as a great example of the importance of firmware updates and the need for a strategy to be in place to automate them. If you are not already applying firmware updates within your organisation, maybe this is a good time to think about starting.

https://www.ncsc.gov.uk/guidance/eud-security-guidance-windows-10-1703#devicefirmware

https://www.ncsc.gov.uk/blog-post/firmware-bugs-are-buses

Hopefully they update their Linux guidance to include recent firmware security advice, not just the Windows guidance. 🙂

See-also:

https://www.ncsc.gov.uk/guidance/end-user-device-security
eg:

https://www.ncsc.gov.uk/guidance/end-user-device-guidance-factory-reset-and-reprovisioning