Intel says it won’t pose any security issues
The cause and details of the attack, including the source of the leak, are not yet known. Although the files in question have been removed from GitHub for the moment, they continue to be available on various platforms. In a statement shared with Tom’s Hardware, Intel said the leak “would not pose any security vulnerability as we don’t rely on hiding information as a security measure.”
Intel’s new statement indicates that it probably cleans sensitive and important information before it is made available to external vendors. On the other hand, considering that the 6GB file contains tools and code to create and optimize BIOS/UEFI images, we can still say that it poses a danger in terms of potential backdoors and security vulnerabilities.
The full statement from Intel is as follows: “Our proprietary UEFI code appears to have been leaked by a third party. We do not believe that this situation reveals new security vulnerabilities, as we do not rely on hiding information as a security measure. This code is covered as part of our bug bounty program in the Project Circuit Breaker campaign, and we encourage any researchers who can identify potential security vulnerabilities to bring it to the fore. We are communicating with both customers and the security research community to ensure they are aware of this situation.”