Paul’s Security Weekly (Video)
Technology
Eclypsium's research team has discovered 3 vulnerabilities in BMCs. Nate Warfield comes on the show to tell the full story! This has garnered much attention in the press:
* Original research post: https://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/
* https://www.securityweek.com/security-flaws-ami-bmc-can-expose-many-data-centers-clouds-attacks
* https://thehackernews.com/2022/12/new-bmc-supply-chain-vulnerabilities.html
* https://therecord.media/three-vulnerabilities-found-in-popular-baseboard-software/
* https://www.bleepingcomputer.com/news/security/severe-ami-megarac-flaws-impact-servers-from-amd-arm-hpe-dell-others/
* https://duo.com/decipher/trio-of-megarac-bmc-flaws-could-have-long-range-effects
* https://www.csoonline.com/article/3682137/flaws-in-megarac-baseband-management-firmware-impact-many-server-brands.html
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw766
Exploits Make You More Secure - PSW #830
Pen Testing As A Service - Seemant Sehgal - PSW #830
Vulnrichment, Hardware Hacking, VPNs - PSW #829
The Impacts Of Cryptocurrency - Nicholas Weaver - PSW #829
Hacker Heroes - Jeremiah Grossman - PSW #828
Corporate Ransomware Deep Dive - Mikko Hypponen - PSW #828
ChatGPT Writes Exploits - PSW #827
Kicking Off With Crypto - PSW #827
Your TV Is Scanning You - PSW #826
Advising The President On Cyber-Physical Resilience - Philip Venables - PSW #826
Hacker Heroes - Winn Schwartau - PSW #825
PCI 4.0 - PSW #825
Why Is Your TV & NAS On The Internet? - PSW #824
Digging Into Supply Chain Security - James McMurry - PSW #824
It's A Minifilter! - PSW #823
XZ - Backdoors and The Fragile Supply Chain - PSW #823
Crypto, Bluetooth Vulns, Unsafe Locks - PSW #822
Are we winning? - Jason Healey - PSW #822
A Dive into Vulnerabilities and Compliance - PSW #821
Securing All The Things - Josh Corman - PSW #821
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast