Virtual Event: Threat Detection and Incident Response Summit - Watch Sessions
Connect with us

Hi, what are you looking for?


Endpoint Security

New Dell Utility Alerts Security Teams of BIOS Attacks

Dell on Friday announced the launch of Dell SafeBIOS Events & Indicators of Attack, a utility designed to alert IT and security teams about BIOS configuration changes that could be part of a sophisticated attack.

Dell on Friday announced the launch of Dell SafeBIOS Events & Indicators of Attack, a utility designed to alert IT and security teams about BIOS configuration changes that could be part of a sophisticated attack.

Dell SafeBIOS Events & Indicators of Attack (IoA) is available immediately worldwide for Dell commercial PCs as part of the company’s Trusted Device solution. Dell told SecurityWeek that SafeBIOS Events & IoA can be downloaded by customers free of charge.

SafeBIOS Events & IoA is designed to identify endpoint threats at the BIOS level by using behavior-based detection technology. The utility monitors the BIOS for any configuration changes and analyzes them to determine if they could be part of an attack.Dell improves BIOS security product

When a potential exploit is detected, the organization’s IT or security team is immediately notified in their management console, enabling them to take quick action before too much damage can be done.

“As workforces transition to remote work nearly overnight, organizations need to ensure their workers’ PCs are secure, starting below the operating system in the BIOS,” Dell said. “Securing the BIOS is particularly critical because a compromised BIOS can potentially provide an attacker with access to all data on the endpoint, including high-value targets like credentials. In a worst-case scenario, attackers can leverage a compromised BIOS to move within an organization’s network and attack the broader IT infrastructure.”

This is not the first enhancement made by Dell to its SafeBIOS product. Last year, it announced a new utility for off-host BIOS verification, resulting from integrations with CrowdStrike, VMware and Secureworks technology.

Dell also announced on Friday that it’s offering temporary licenses for Dell Encryption until May 15. The offer is meant to help organizations whose employees work remotely due to the coronavirus outbreak.

Related: Dell Adds BIOS Verification Technology to Business PCs

Advertisement. Scroll to continue reading.

Related: Dell Launches Endpoint Security Product for Air-Gapped Systems

Related: Dell Teams With CrowdStrike, Secureworks for New Endpoint Security Offering

Related: CrowdStrike Endpoint Security Platform Now Detects Firmware Attacks

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.


Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.


Expert Insights

Related Content

Endpoint Security

Today, on January 10, 2023, Windows 7 Extended Security Updates (ESU) and Windows 8.1 have reached their end of support dates.

CISO Strategy

Varied viewpoints as related security concepts take on similar traits create substantial confusion among security teams trying to evaluate and purchase security technologies.

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Endpoint Security

The Zero Day Dilemma

Application Security

Password management firm LastPass says the hackers behind an August data breach stole a massive stash of customer data, including password vault data that...

Endpoint Security

When establishing visibility and security controls across endpoints, security professionals need to understand that each endpoint bears some or all responsibility for its own...

Application Security

Microsoft on Tuesday pushed a major Windows update to address a security feature bypass already exploited in global ransomware attacks.The operating system update, released...

Application Security

Electric car maker Tesla is using the annual Pwn2Own hacker contest to incentivize security researchers to showcase complex exploit chains that can lead to...