https://www.theregister.co.uk/2019/10/22/microsoft_securecore_pcs/

Pointing to a five-fold increase in firmware vulnerabilities over the last three years and not saying much about the growing number of Windows vulnerabilities, Microsoft on Monday said it has been working with PC-selling and silicon-making partners to ship kit that implements protection from malicious low-level device code.

Microsoft calls its firmware defense initiative "Secured-core PCs," and says compliant devices can be purchased presently from Dell, Dynabook, HP, Lenovo, and Panasonic, or from stores that carry its own Surface computers - no surprise there.