Found this rather detailed list of the NSA's latest spyware gadgets, with several different remote bios exploits that once installed are virtually undetectable and can survive reinstall of the OS:
How does the OS defend against such bios intrusion? Can the NIC be part of such an attack, or do they need to exploit an application running at the OS level?.
I have been using Fortress Linux for awhile now (no affiliation), which is an OS and VPN that was developed to withstand all intrusion and surveillance from any source, even from a default install. For reference: https://www.fortresslinux.org
Assuming there are no vulnerable applications running, is there any other way into the bios over the internet?