The latest NSA leak describes DEITYBOUNCE, a tool for flashing malicious BIOS on Dell servers. The doc is from 2007 and such attacks would be much harder now.