When BIOS updates become malware attacks