andreafortuna.org
Dmytro Oleksiuk: exploring and exploiting Lenovo firmware | So Long, and Thanks for All the Fish
A new 0day vulnerability in Lenovo firmware that allows arbitrary SMM code execution on a wide range of Lenovo models Really interesting paper by Dmytro Oleksiuk, about his research on Lenovo Thinkpad