Using Open Source and Built-In Tools for Supply Chain Validation
1:03:37
Using Open Source and Built-In Tools for Supply Chain Validation
14 күн бұрын
Eclypsium Supply Chain Security Overview
39:02
Eclypsium Supply Chain Security Overview
28 күн бұрын
Eclypsium Automata - An Expert Researcher Never Sleeps
39:06
Eclypsium Automata - An Expert Researcher Never Sleeps
Ай бұрын
Market Forces vs. Regulatio: How to Drive IT Product Safety
48:14
Market Forces vs. Regulatio: How to Drive IT Product Safety
2 ай бұрын
Control the Network, Control the Universe
56:31
Control the Network, Control the Universe
2 ай бұрын
UEFI Firmware Exploit Evades EDR (Vendor 1)
1:49
UEFI Firmware Exploit Evades EDR (Vendor 1)
2 ай бұрын
Shim Shady (CVE-2023-40547) - A Bootloader Vulnerability Story
56:08
Shim Shady (CVE-2023-40547) - A Bootloader Vulnerability Story
3 ай бұрын
Looking Back to See Ahead: A History of Network Device Attacks
54:02
Looking Back to See Ahead: A History of Network Device Attacks
4 ай бұрын
Diving Into the Abyss: Navigating Supply Chain Security with NIST CSF 2.0
51:43
Diving Into the Abyss: Navigating Supply Chain Security with NIST CSF 2.0
4 ай бұрын
Network Devices in Ransomware's Crosshairs: Addressing Supply Chain Threats
51:03
Network Devices in Ransomware's Crosshairs: Addressing Supply Chain Threats
6 ай бұрын
UEFI Firmware Exploit Evades EDR (Vendor 2)
2:02
UEFI Firmware Exploit Evades EDR (Vendor 2)
6 ай бұрын
Don't Panic! How to Manage IT Product Risk with Supply Chain Intelligence
30:32
Don't Panic! How to Manage IT Product Risk with Supply Chain Intelligence
6 ай бұрын
Spooky Experiments: Building a Security Research Lab
1:01:32
Spooky Experiments: Building a Security Research Lab
7 ай бұрын
Getting the Gist of CJIS - October 2023
21:53
Getting the Gist of CJIS - October 2023
8 ай бұрын
Attacking an Internal Windows Medical Device from the Internet
2:07
Attacking an Internal Windows Medical Device from the Internet
8 ай бұрын
Citrix NetScaler CVE-2023-3519 exploit and detection
1:48
Citrix NetScaler CVE-2023-3519 exploit and detection
8 ай бұрын
Tackling Supply Chain Security with NIST CSF 2.0
1:01:39
Tackling Supply Chain Security with NIST CSF 2.0
9 ай бұрын
Getting the Gist of CJIS - July 2023
26:35
Getting the Gist of CJIS - July 2023
10 ай бұрын
Unveiling Gigabyte's Backdoor: Mitigating Infrastructure Supply Chain Risk
1:03:05
Unveiling Gigabyte's Backdoor: Mitigating Infrastructure Supply Chain Risk
11 ай бұрын
Navigating the Financial Impact & Material Challenges of the IT Supply Chain
54:03
Navigating the Financial Impact & Material Challenges of the IT Supply Chain
11 ай бұрын
BlackLotus - How UEFI Secure Boot Became a Gateway for Cyber Attacks
59:40
BlackLotus - How UEFI Secure Boot Became a Gateway for Cyber Attacks
Жыл бұрын
A Deep-Dive into TPRM and NIST Framework Integration
1:15:08
A Deep-Dive into TPRM and NIST Framework Integration
Жыл бұрын
Get the GIST of CJIS: What the New Requirements Mean to You
22:55
Get the GIST of CJIS: What the New Requirements Mean to You
Жыл бұрын
Scanning LINUX for Firmware Vulnerabilities
1:01
Scanning LINUX for Firmware Vulnerabilities
Жыл бұрын
Supply Chain Security and Trust
1:24
Supply Chain Security and Trust
Жыл бұрын
Firmware and Its Invisibility
1:28
Firmware and Its Invisibility
Жыл бұрын
Supply Chain Complexity and Security Threats
1:06
Supply Chain Complexity and Security Threats
Жыл бұрын
The Transition from BIOS to UEFI
1:23
The Transition from BIOS to UEFI
Жыл бұрын
Boot Security and Integrity
1:22
Boot Security and Integrity
Жыл бұрын
Пікірлер
@rafaelrMachado
@rafaelrMachado 8 сағат бұрын
Perfect explanation!
@gelsonjosedealmeidafilho6060
@gelsonjosedealmeidafilho6060 12 күн бұрын
Excellent! 🙂
@user-gi4js1md8e
@user-gi4js1md8e 14 күн бұрын
Great job - thx Paul 👌
@kaloyankyuchukov4052
@kaloyankyuchukov4052 Ай бұрын
Thank you so much for this!
@gerrybuffett770
@gerrybuffett770 2 ай бұрын
Anyone else here cause of logofail CVE?
@cexeodus
@cexeodus 3 ай бұрын
Hey I'm a security researcher and well this def got used in the wild. At least once... This is basically the exact same vulnerabilty chain I finally got Microsoft to look into, as far fetched as it sounds. Almost all of your analysis is spot on for how it happened. Im pretty certain this is what i was trying to get the word about for years edit- i forgot to make it clear, i identified an attack like this that was on windows, ubuntu, and on android. All of these being my own devices that were hacked and bricked. But, on the windows machine, was able to pull the entire os drive, unencrypted, and lets just say i got the word out.
@Jay-tf2bx
@Jay-tf2bx 3 ай бұрын
😃 Promo_SM
@SharminAkthar332
@SharminAkthar332 4 ай бұрын
Excellent ❤
@adusabubeker2611
@adusabubeker2611 4 ай бұрын
M/a 🙏 Good Morning Globsl Game Zone Area Adus Abubeker
@dissonantelysium
@dissonantelysium 5 ай бұрын
This is awesome, that you are below 1000 subs are a mystery!
@poofygoof
@poofygoof 6 ай бұрын
is this related to LogoFAIL?
@LALPRO_
@LALPRO_ 6 ай бұрын
exploit link plz or metasploit module link
@wowzers1237____
@wowzers1237____ 7 ай бұрын
great stuff
@user-gi4js1md8e
@user-gi4js1md8e 7 ай бұрын
🙏
@ramanmohurle4317
@ramanmohurle4317 8 ай бұрын
exploit link?
@MarcosMadlhate-ej7tz
@MarcosMadlhate-ej7tz Жыл бұрын
Thanksfor your support
@EnigmaForensics
@EnigmaForensics Жыл бұрын
You guys should redo this discussion with no Halloween outfits and updated content. Great stuff you presented!
@aaronm3831
@aaronm3831 Жыл бұрын
pքɾօʍօʂʍ 💘
@poofygoof
@poofygoof 2 жыл бұрын
I always wonder what organizational faults are present within a company that enable things like this. conspiracy theories aside, was a sustaining budget for security not allocated? contract dispute with third-party BMC SW/FW vendor?
@LivingTheDream77
@LivingTheDream77 2 жыл бұрын
Why isn’t credential guard enabled ?
@pentester-ethicalhacker
@pentester-ethicalhacker 2 жыл бұрын
Awesome, Thanks!
@egpubgmobile52
@egpubgmobile52 5 жыл бұрын
cool
@hossammoah
@hossammoah 3 ай бұрын
This isn't cool? It's a top level threat that is embedded deep into your system.