If malware wants to bury deep inside your Lenovo or Gigabyte servers, they can just ask Vertiv's insecure BMC firmware

A pair of vulnerabilities in BMC firmware used in servers built by Lenovo - and in Acer and Penguin Computing boxes using Gigabyte server motherboards - can be exploited to hide malware deep below the operating system, hypervisor, and antivirus."