Security Weekly
Below the Surface: The Supply Chain Security PodcastSubscribe
Network Security, Critical Infrastructure Security, Supply chain

Reverse Engineering BMCs and Other Firmware – Vladyslav Babkin – BTS #15

Vlad is part of the Eclypsium research team and has discovered several flaws in BMC ecosystems. He comes on the show to talk about his journey and cover the details behind BMC vulnerabilities and attacks.

Segment Resources: https://forum.defcon.org/node/245714 https://eclypsium.com/research/bmcc-lights-out-forever/ https://eclypsium.com/blog/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/

Full episode and show notes

Announcements

  • Below the surface listeners can learn more about Eclypsium by visiting eclypsium.com/go - there you will find the “Ultimate guide to supply chain security”, an on-demand webinar I presented called “Unraveling Digital Supply Chain Threats and Risk”, a paper on the relationship between ransomware and the supply chain, and a customer case study with Digital Ocean. If you are interested in seeing our product in action you can also sign up for a demo, you can get all that at eclypsium.com/go!

Guest

Vladyslav Babkin
Security Researcher at Eclypsium

Vlad is currently a Security Researcher at Eclypsium with over 10 years of experience in networking, security, firmware research and software engineering. He is a long-time member of dcua CTF team and is passionate about breaking software and firmware to make the world a safer place.

Hosts

Principal Security Evangelist at Eclypsium
Principal Cyber Strategist at Eclypsium

Related

Phishing Attacks Increase, Network Transformation, & Unified SASE as a Service – Deepen Desai, Renuka Nadkarni, Tim Roddy – ESW #361

The landscape of phishing attacks continues to rapidly evolve. In 2023, Zscaler ThreatLabz observed a year-over-year increase of 58.2% in global phishing attempts. This surge was characterized by emerging schemes, including voice phishing, recruitment scams, and browser-in-the-browser attacks. This segment is sponsored by Zscaler. Visit https://se...