Security Weekly
Below the Surface: The Supply Chain Security PodcastSubscribe
Vulnerability Management, Supply chain, Threat Management

Firmware Pulse – What is Happening Right Now – Nicholas Starke – BTS #7

Discuss current events in firmware security, such as the techniques utilized in BlackLotus. We will compare Baton Drop with Grub2 capabilities.

Segment Resources: https://starkeblog.com/

This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!

Sponsored By

Eclypsium
Full episode and show notes

Guest

Nicholas Starke
Nicholas Starke
Threat Researcher at Hewlett Packard Enterprise

Nicholas Starke is a firmware security researcher focusing on network appliances and applications. Nick’s work focuses both on system firmware, specifically UEFI as well as higher level Linux runtime firmware. Nick is located in Des Moines, Iowa.

When Nick is not hacking on firmware, he can be found writing weird music or collaborating with other local security professionals through his local citysec user-group, SecDSM.

Hosts

Paul Asadoorian
Paul Asadoorian
Founder at Security Weekly
Scott Scheferman
Scott Scheferman
Principal Cyber Strategist at Eclypsium

Related

Vulnerability Management
Vulnerability Reporting, Zyxel, GPS Spoofing – PSW #808

We navigate through dangerous cyber terrain, examining real-world examples like the WebP library and the Curl vulnerability. Critical issues in Zyxel firewalls will also be unmasked as we shed light on the urgency of improving vulnerability reporting and cataloging and addressing the often-overlooked problem of overclassifying harmless software bug...