EPSS - The Exploit Prediction Scoring System - Jay Jacobs, Wade Baker - BTS #34 Below The Surface (Video) - The Supply Chain Security podcast

Artwork

Tech Business Security Weekly Productions Cybersecurity Firmware Paulasadoorian Supplychain Video InfoSec

Player FM - Internet Radio Done Right

one 年前已添加！

内容由Security Weekly Productions提供。所有播客内容（包括剧集、图形和播客描述）均由 Security Weekly Productions 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

<

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/action-academy-replace-the-job-you-hate-with-a-life-you-love">Action Academy | Replace The Job You Hate With A Life You Love</a></span>

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/action-academy-replace-the-job-you-hate-with-a-life-you-love">Action Academy | Replace The Job You Hate With A Life You Love</a></span> podcast artwork

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/action-academy-replace-the-job-you-hate-with-a-life-you-love">Action Academy | Replace The Job You Hate With A Life You Love</a></span> podcast artwork

1
Action Academy | Replace The Job You Hate With A Life You Love

15 hours之前15h ago

每天

Ready to replace your 6-figure salary with real freedom? This is the podcast for high earners who feel stuck in jobs they’ve outgrown. If you’re asking, “How do I actually replace $10K–$20K/month so I can quit and never look back?” — welcome home. At Action Academy, we teach you how to buy small businesses and commercial real estate to create cash flow that actually replaces your job. Monday through Friday, you’ll learn from 7–9 figure entrepreneurs, real estate moguls, and acquisition pros who’ve done it — and show you how to do it too. Hosted by Brian Luebben (@brianluebben), who quit his 6-figure sales role in 2022 to build a global business while traveling the world. If you're a high-income earner ready to become a high-impact entrepreneur, this show is your playbook. Subscribe now and start your path to freedom — or keep pretending your job will get better someday....

Below the Surface (Video) - The Supply Chain Security Podcast « »
EPSS - The Exploit Prediction Scoring System - Jay Jacobs, Wade Baker - BTS #34

大约1年之前 59:43

分享

MP4•单集首页

内容由Security Weekly Productions提供。所有播客内容（包括剧集、图形和播客描述）均由 Security Weekly Productions 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

Jay Jacobs Co-Founder and Data Scientist and Wade Baker Co-Founder; Data Storyteller from The Cyentia Institute come on the show to talk about The Exploit Prediction Scoring System (EPSS).

This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!

Show Notes: https://securityweekly.com/bts-34

… continue reading

36集单集

#Tech #Business #Security Weekly Productions #Cybersecurity #Firmware #Paulasadoorian #Supplychain #Video #InfoSec

Artwork

EPSS - The Exploit Prediction Scoring System - Jay Jacobs, Wade Baker - BTS #34

Below the Surface (Video) - The Supply Chain Security Podcast

published 大约1年之前

分享

MP4•单集首页

内容由Security Weekly Productions提供。所有播客内容（包括剧集、图形和播客描述）均由 Security Weekly Productions 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

Jay Jacobs Co-Founder and Data Scientist and Wade Baker Co-Founder; Data Storyteller from The Cyentia Institute come on the show to talk about The Exploit Prediction Scoring System (EPSS).

This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!

Show Notes: https://securityweekly.com/bts-34

… continue reading

36集单集

#Tech #Business #Security Weekly Productions #Cybersecurity #Firmware #Paulasadoorian #Supplychain #Video #InfoSec

所有剧集

×

Artwork

1
Supply Chain Policies - Stewart Scott, Trey Herr - BTS #36 59:37

37 weeks之前59:37

59:37

Stewart and Trey join us to talk about driving cybersecurity policies for the nation, what makes a good policy, what makes a bad policy, supply chain research and policies, and overall how we shape policies that benefit cybersecurity. Segment Resources: https://www.atlanticcouncil.org/in-depth-research-reports/report/broken-trust-lessons-from-sunburst/ https://www.atlanticcouncil.org/in-depth-research-reports/report/open-source-software-as-infrastructure/ This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-36…

Artwork

1
The Known Exploited Vulnerability catalogue, aka the KEV - Tod Beardsley - BTS #35 55:27

39 weeks之前55:27

55:27

Gain insights into the CISA KEV straight from one of the folks at CISA, Tod Beardsley. Learn how KEV was created, where the data comes from, and how you should use it in your environment. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Resource: https://cisa.gov/kev Show Notes: https://securityweekly.com/bts-35…

Artwork

1
EPSS - The Exploit Prediction Scoring System - Jay Jacobs, Wade Baker - BTS #34 59:43

41 weeks之前59:43

59:43

Jay Jacobs Co-Founder and Data Scientist and Wade Baker Co-Founder; Data Storyteller from The Cyentia Institute come on the show to talk about The Exploit Prediction Scoring System (EPSS). This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-34…

Artwork

1
Securing OT Environments - Dr. Ed Harris - BTS #33 52:54

43 weeks之前52:54

52:54

Ed Harris joins us to discuss how to secure OT environments, implement effective air gaps, and more! This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-33

Artwork

1
Mitre ATT&CK - Adam Pennington - BTS #32 52:34

45 weeks之前52:34

52:34

We discuss the various aspects of Mitre Att&ck, including tools, techniques, supply chain aspects, and more! This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-32

Artwork

1
Managing Complex Digital Supply Chains - Cassie Crossley - BTS #31 1:03:06

47 weeks之前1:03:06

1:03:06

Cassie has a long history of successfully managing a variety of security programs. Today, she leads supply chain efforts for a very large product company. We will tackle topics such as software supply chain management, SBOMs, third-party supply chain challenges, asset management, and more! This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-31…

Artwork

1
Systems Of Trust - Robert Martin - BTS #30 55:20

49 weeks之前55:20

55:20

Bob Martin comes on the show to discuss systems of trust, supply chain security and more! This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-30

Artwork

1
Supply Chains, Firmware, And Patching - Jason Kikta - BTS #29 1:06:10

51 weeks之前1:06:10

1:06:10

Jason joins us to discuss the current enterprise landscape for defending against supply chain attacks, remediating firmware issues, and the current challenges with patch management. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-29…

Artwork

1
5G Hackathons - Casey Ellis - BTS #28 56:31

1 year之前56:31

56:31

Casey recently was involved in an event that brought hackers and 5G technology together, tune-in to learn about the results and how we can use bug bounty programs to improve the security of "things". This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-28…

Artwork

1
Governance, Compliance, and The Digital Supply Chain - Josh Marpet - BTS #27 50:01

1 year之前50:01

50:01

In this episode, we discuss digital supply chain governance and compliance, featuring Josh Marpet from Guarded Risk, hosted by Paul Asadoorian and Allan Alford. Specifically, we discuss: The importance of understanding and complying with regulations affecting digital supply chains, such as Executive Order 14028 and the NIST Cybersecurity Framework. The podcast highlighted the impact of EU regulations, like CRA, GDPR, and DORA, on global businesses, underscoring the shared responsibility model in data security. Vendors' duties in open-source security and software vulnerability management were discussed, with a call for automation in software inventory and security, including the use of SBOMs. The conversation included strategies for effective supply chain risk management, advising regular updates, and understanding the interconnectedness of vulnerabilities. International compliance, particularly with EU data security laws, presents operational challenges and necessitates robust cybersecurity measures. Proactive vendor communication and automated processes are crucial for managing cybersecurity threats efficiently. Continuous risk assessment is preferred over periodic checks, with an emphasis on a nuanced approach to cybersecurity risk management. (00:00) - Digital Supply Chain Governance Compliance (14:08) - EU Regulations on Data Security (21:38) - Responsibility of Vendors in Open Source (27:49) - Supply Chain Risk Management Program Advice (39:01) - Automating Software Inventory and Security This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more! Show Notes: https://securityweekly.com/bts-27…

Artwork

1
What We Don’t Know Will Hurt Us - Cheryl Biswas - BTS #26 53:35

1 year之前53:35

53:35

Cheryl is super passionate about supply chain security and visibility. Tune in to our discussion on how we can collectively get better at reducing the attack surface and working to fix the wide variety of digital supply chain issues we have today. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Segment Resources: https://files.scmagazine.com/wp-content/uploads/2024/03/AtlSecConMassIoT23.pdf https://files.scmagazine.com/wp-content/uploads/2024/03/Tactical-Edge-2021-Software-Supply-Chain.pdf https://files.scmagazine.com/wp-content/uploads/2024/03/Texas-Adversary-2021-Software-Supply-Chain.pdf Show Notes: https://securityweekly.com/bts-26…

Artwork

1
Supply Chain Threats and Regulations - BTS #25 45:32

1 year之前45:32

45:32

Paul and Allan will talk a little bit about Allan's background and current work at Eclypsium. Next, we'll cover some of the recent news and topics we've been discussing on our blog including Firewall and VPN appliance security struggles, Shim Shady, Glubteba and other malware targeting UEFI, and some thoughts on recent regulations affecting supply chains such as the EU CRA. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-25…

Artwork

1
Managing Supply Chain Risk - Saša Zdjelar - BTS #24 47:15

1 year之前47:15

47:15

Saša Zdjelar joins us on this episode to dive into how organizations can manage supply chain risk, including the current challenges we face and how best to deal with them. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-24…

Artwork

1
Closing The Supply Chain Visibility Gap - Dr. Olga Livingston - BTS #23 58:49

1 year之前58:49

58:49

Short of ripping everything apart (hardware and software) and inspecting the components, which is very time-consuming, how do we solve the visibility gap in various supply chains? Dr. Olga Livingston from CISA joins us to discuss! This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-23…

Artwork

1
SBOMs and Supply Chains - Allan Friedman - BTS #22 1:00:40

1 year之前1:00:40

1:00:40

We sit down with the father of the SBOM, Allan Friedman, to discuss examples of where we really need SBOMs, how to operationalize SBOMs, and how to identify and deal with bad things that may be in your SBOM! CISA's resources on SBOM are at cisa.gov/SBOM and anyone can find out more or ask for a meeting at SBOM@cisa.dhs.gov This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-22…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Supply Chain Risk Management - David Vaughn - BTS #21 48:37

1 year之前48:37

48:37

We talk about Supply Chain Risk Management in the context of the cloud and US federal government with David Vaughn. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-21

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Network Device Supply Chains and Lateral Movement - Joe Hall - BTS #20 54:54

1 year之前54:54

54:54

In this episode, we have the privilege of sitting down with renowned security expert Joe Hall to discuss three critical facets of modern cybersecurity: network device security, supply chain threats, and lateral movement. Join us as Joe Hall shares his wealth of knowledge and experience, unraveling the complexities of network device security, the invisible gatekeepers of our digital lives. Discover the vulnerabilities that hackers exploit and the strategies to fortify your network defenses. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-20…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
A Year in Review on Offensive Security, Defensive Landscapes, and Global Implications - Tyler Robinson - BTS #19 53:46

1 year之前53:46

53:46

In this episode, we delve into the dynamic world of supply chain security, recapping the significant developments of the past year. Join us as we explore the evolution of offensive security, defensive landscapes, and the key actors shaping the cybersecurity landscape. Our featured guest, Tyler Robinson, Founder and CEO of Dark Element, brings a wealth of expertise to the discussion. With a deep understanding of cybersecurity and a track record of innovation, Tyler provides valuable insights into what these trends mean for companies, supply chains, governments, and geopolitics. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-19…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Defending Against Supply Chain Attacks - Bri Rolston - BTS #18 1:06:28

1 year之前1:06:28

1:06:28

Bri has spent her career investigating and defending against critical infrastructure attacks. Hear her take on the current threat landscape, supply chain security, and more! This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-18…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Protecting The Digital Supply Chain - Yuriy Bulygin - BTS #17 1:03:04

1 year之前1:03:04

1:03:04

Dr. Yuriy Bulygin is the CEO and founder of Eclypsium, the digital supply chain security company. Prior to Eclypsium, Yuriy was Chief Threat Researcher at Intel Corporation. He is also the creator of CHIPSEC, the popular open-source firmware and hardware supply chain security assessment framework When enterprises started using CHIPSEC to find vulnerabilities, discover compromised firmware, or just poke around hardware systems, Yuriy founded Eclypsium with Alex Bazhaniuk. Since then Eclypsium has been on a mission to protect devices from supply chain risks. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-17…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
UEFI and The Digital Supply Chain - Dick Wilkins - BTS #16 52:01

1 year之前52:01

52:01

Learn about the evolution of UEFI, various aspects of supply chain security surrounding UEFI, and the interactions between links in the supply chain that ultimately end up delivering you a computer or server. Segment Resources: https://uefi.org/sites/default/files/resources/What%20is%20UEFI-Aug31-2023-Final.pdf This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-16…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Reverse Engineering BMCs and Other Firmware - Vladyslav Babkin - BTS #15 55:31

2 years之前55:31

55:31

Vlad is part of the Eclypsium research team and has discovered several flaws in BMC ecosystems. He comes on the show to talk about his journey and cover the details behind BMC vulnerabilities and attacks. Segment Resources: https://forum.defcon.org/node/245714 https://eclypsium.com/research/bmcc-lights-out-forever/ https://eclypsium.com/blog/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ Show Notes: https://securityweekly.com/bts-15…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Protecting The Federal Supply Chain - John Loucaides - BTS #14 53:41

2 years之前53:41

53:41

John Loucaides, SVP Strategy at Eclypsium, joins us on the show to discuss protecting the federal supply chain! This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-14

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Network Device Supply Chain Security - Nate Warfield - BTS #13 55:13

2 years之前55:13

55:13

We dig into network devices/appliances, why they are still around, who is attacking them, and how. Just why are attackers using network devices in ransomware campaigns and how do we stop them? Tune-in to find out as Nate Warfield, Director of Threat Research and Intelligence at Eclypsium joins us for this episode! This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts-13…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Dealing with The Digital Supply Chain - Ramy Houssaini - BTS #12 55:44

2 years之前55:44

55:44

Ramy Houssaini joins us to discuss the challenges enterprises face when dealing with supply chain threats, risks and vulnerabilities. We'll explore how to identify cybersecurity gaps in your various supply chains, discuss real-world examples such as Log4j and more! Show Notes: https://securityweekly.com/bts-12…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
SCRM and Supply Chain Security Up and Down the Stack - Steve Orrin - BTS #11 57:45

2 years之前57:45

57:45

Supply Chain threats and industry / government initiatives like EO 14028 are driving a deeper understanding and a set of requirements for applying supply chain risk management (SCRM) and increased transparency (ex. SBOM) across the software ecosystem up and down the stack. Platform and system firmware present unique challenges for supply chain assurance from the depths of the stack. Segment Resources: ESF: Securing the Software Supply Chain for Customers https://media.defense.gov/2022/Nov/17/2003116444/-1/-1/0/ESF_SECURING_THE_SOFTWARE_SUPPLY_CHAIN_CUSTOMER_SLICKSHEET.PDF https://media.defense.gov/2022/Nov/17/2003116445/-1/-1/0/ESF_SECURING_THE_SOFTWARE_SUPPLY_CHAIN_CUSTOMER.PDF ESF: Securing the Software Supply Chain for Suppliers https://media.defense.gov/2022/Oct/31/2003105572/-1/-1/0/ESF_SECURING_THE_SOFTWARE_SUPPLY_CHAIN_SUPPLIERS_SLICKSHEET.PDF https://media.defense.gov/2022/Oct/31/2003105368/-1/-1/0/SECURING_THE_SOFTWARE_SUPPLY_CHAIN_SUPPLIERS.PDF ESF: Securing the Software Supply Chain for Developers https://media.defense.gov/2022/Sep/01/2003068942/-1/-1/0/ESF_ SECURING_THE_SOFTWARE_SUPPLY_CHAIN_DEVELOPERS.PDF CISA SBOM Site https://www.cisa.gov/sbom Show Notes: https://securityweekly.com/bts-11…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Learning About Firmware Security - Xeno Kovah - BTS #10 59:37

2 years之前59:37

59:37

Firmware security is a deeply technical topic, that's hard to get started in. In this talk, Xeno will discuss some past work in firmware security, and how he has organized resources such as a low level timeline (with over 300 talks), and free MOOC classes, to help teach people about firmware security. Segment Resources: https://ost2.fyi https://darkmentor.com/timeline.html Show Notes: https://securityweekly.com/bts10…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Accidentally Learning about Security: From Firmware to the Cloud - Brian Richardson - BTS #9 1:00:23

2 years之前1:00:23

1:00:23

Brian Richardson didn't start out wanting to do marketing or computer security... but after starting his career as a BIOS programmer, he tripped and fell into technical marketing (aka "Binary to English translator"). Brian's here to talk about the importance of hardware & firmware security in a SaaS world. Segment Resources: https://www.youtube.com/watch?v=I2FwiEH6dg4 https://www.youtube.com/watch?v=i9PrWw4ljeg https://medium.com/intel-tech/security-built-on-a-foundation-of-trust-1fa1dbb74cbc https://archive.fosdem.org/2020/schedule/event/firmware_culisfu/ Show Notes: https://securityweekly.com/bts9…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Introducing fwupd and the Linux Vendor Firmware Service - Richard Hughes - BTS #8 57:09

2 years之前57:09

57:09

The LVFS is a project used by over 130 different vendors, from all positions of the supply chain. It decompresses, decompiles, then analyses firmware looking for issues, and then automatically builds a SBoM for each download. Segment Resources: https://fwupd.org/ https://github.com/fwupd Show Notes: https://securityweekly.com/bts8…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Firmware Pulse - What is Happening Right Now - Nicholas Starke - BTS #7 48:00

2 years之前48:00

48:00

Discuss current events in firmware security, such as the techniques utilized in BlackLotus. We will compare Baton Drop with Grub2 capabilities. Segment Resources: https://starkeblog.com/ Show Notes: https://securityweekly.com/bts7

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Armoring the Unified Extensible Firmware Interface (UEFI), from Standards to Open Source - Vincent Zimmer - BTS #6 55:16

2 years之前55:16

55:16

This session will provide an overview of the history of host firmware, or BIOS, focusing on the arc of the Unified Extensible Firmware Interface. It will include the development of defenses like UEFI Secure Boot and the challenges in scaling assurance across a broad ecosystem. It will close on works-in-progress and opportunities to build upon the school-of-hard-knocks learnings in this space. Show Notes: https://securityweekly.com/bts6…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Community Insights: Supply Chain Threats, Critical Firmware Attacks, and more! - BTS #5 43:30

2 years之前43:30

43:30

In this edition of Below The Surface, we discuss insights Scott collected from various members of our community. Topics include supply chain threats, critical firmware attacks, and more! We also welcome special guest Tyler Robinson! View the full report here: https://eclypsium.com/2022/12/13/december-firmware-threat-report/ This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts5…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Supply Chain Threats, Vulnerable Drivers, OpenSSL Vulnerabilities, and more! - BTS #4 47:37

2 years之前47:37

47:37

Paul and Scott talk about supply chain threats, vulnerable drivers, leaked source code and keys, and cover what we know about the OpenSSL 3.x vulnerability. This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts4…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Inevitable Attacks, UEFI Vulnerabilities, and more! - BTS #3 33:57

2 years之前33:57

33:57

This month Scott and Paul discuss the inevitability of attacks against certain sectors, UEFI vulnerabilities galore and so much more! Get the full report here: https://eclypsium.com/2022/10/03/september-firmware-threat-report/ This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts3…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Root of Trust (RoT) - BTS #2 53:25

2 years之前53:25

53:25

Paul and Scott break down the Root of Trust (RoT) and other highlights from the August 2022 Below The Surface Threat Report: https://eclypsium.com/2022/08/31/august-firmware-threat-report/ This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts2…

B

Below the Surface (Video) - The Supply Chain Security Podcast

Below the Surface (Video) - The Supply Chain Security Podcast podcast artwork

1
Firmware & Supply Chain Security - BTS #1 45:27

2 years之前45:27

45:27

Paul Asadoorian and Scott Scheferman sit down to discuss this month's firmware and supply chain threat report. We cover some of the history and latest developments regarding Secure Boot security research, the threats we face securing the firmware supply chain, and some insights into threat actors targeting firmware. View the full report here: https://eclypsium.com/2022/07/27/july-firmware-threat-report/ This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them! Show Notes: https://securityweekly.com/bts1…

欢迎使用Player FM

Player FM正在网上搜索高质量的播客，以便您现在享受。它是最好的播客应用程序，适用于安卓、iPhone和网络。注册以跨设备同步订阅。

收听超过500个主题

边探索边听这个节目