нерегулярный подкаст о жизни ресечеров по обе стороны океана https://nitter.gq/t.co/49mnhpzsEG
in the noise
Joined May 2009
- Tweets2.5K
- Following629
- Followers1.6K
- Likes249
Noise Security Bit retweeted
📺Our REsearch: "A Dark Side of UEFI: Cross-Silicon Exploitation" recording is available!
🎙️@matrosov and @flothrone at #OffensiveCon23 stage talking about the new ARM and TrustZone attacks exposed from recent UEFI adoption.
youtube.com/watch?v=9dfISRD6…
Noise Security Bit retweeted
⛓️The widespread use of UEFI on ARM devices notably expands the attack surfaces within TrustZone and beyond, raising security concerns
💥REsearch: "A Dark Side of UEFI: Cross-Silicon Exploitation" presented the new ARM attacks at @offensive_con
🔬Slides: github.com/binarly-io/Resear…
Noise Security Bit retweeted
The LABScon CFP is upon us and it’s already got some amazing submissions. Got cool, new, never-before-seen research? We’d love to have you with us!
The LABScon CFP deadline is slowly creeping up us.
Get your submissions in by June 15 : s1.ai/cfp23
Come share research on nation-state APTs, defending critical infrastructure, malware hunting at scale, attacking and protecting AI, exploit discoveries...
Noise Security Bit retweeted
Supply Chain security is not only about detecting known threats. It's about eliminating the blind spots and gaining more transparency and explainability. Some companies attempt to adapt their traditional methods to fit into newer paradigms, which proves ineffective in practice.
Noise Security Bit retweeted
🔥At @offensive_con, we showcased three different attack scenarios on ARM UEFI and beyond:
1️⃣CWE-125: OOB (memory leak) with GetVariable/SetVariable pattern.
2️⃣BRLY-2022-033: GetVariable Stack overflow (UsbConfigDxe).
3️⃣LPE to SMM from DXE by design.
youtube.com/watch?v=7COjaySY…
![[Offensivecon] A Dark Side of UEFI: Cross-Silicon Exploitation](https://pbs.twimg.com/card_img/2116816162172338176/fKj4eHYn?format=jpg&name=800x419)
Noise Security Bit retweeted
During @offensive_con our @marver presented his research on security aspects of embedded SIM cards.
We are releasing SMShell, an SMS based implant proof of concept for Red Teaming that can evade out of band.
Blogpost: persistent-security.net/post…
GitHub: github.com/persistent-securi…
Embedded Threats: A Deep Dive into the Attack Surface and Security Implications of eSIM Technology by @marver now #OffensiveCon23
Noise Security Bit retweeted
UEFI ARM code contains a lot of blindspots with mitigation coverage. Not all functions are covered by canary checking (only functions with potentially unsafe calls to MemLib/PrintLib are protected).
But even partial coverage bumps FW security to the next level compared to x86.
Noise Security Bit retweeted
Leak of MSI UEFI signing keys stokes fears of “doomsday” supply chain attack <- reporting by @dangoodin001 arstechnica.com/information-…
Noise Security Bit retweeted
⛓️Design issues are the worst!
🔥Given the current revocation architecture, we are facing the serious challenges of accommodating over 2300+ bootmgr binaries within DBX Revocation List (limited space left in EFI Variable storage).
Microsoft will take nearly a year to finish patching new 0-day Secure Boot bug arstechnica.com/information-… by @AndrewWrites
Noise Security Bit retweeted
😎We are excited to Welcome Alex @matrosov @binarly_io for the📡CXO panel!
🧠Learn, network & collaborate with the #hardwaresecurity geniuses➡️bit.ly/3UCENgz
#hw_ioUSA2023 #Conference
Noise Security Bit retweeted
Heading to the Qualcomm Product Security Summit and @Offensive_con this week
🔥A Dark Side of UEFI: Cross-Silicon Exploitation
@Binarly_io REsearch going to present new ways of exploiting Qualcomm Snapdragon 8 devices with UEFI-specific flavor. Stay tuned!
@flothrone @yeggorv
Noise Security Bit retweeted
Binarly adventures at #RSAC2023🤟
youtube.com/watch?v=0q-hTDa1…
Noise Security Bit retweeted
Damn! That was one of the doomsday scenarios we always thought of at Intel. How did this happen?
haven't dived into the detail yet but will soon. I trust @matrosov
Noise Security Bit retweeted
🎙️Join us tomorrow for the #BHASIA talk: "The Various Shades of Supply Chain: SBOM, N-Days, and Zero Trust." /cc @hughsient @immune_gmbh
⛓️We have some fascinating data insights regarding firmware supply chain security.
blackhat.com/asia-23/briefin…
Noise Security Bit retweeted
💥HP: support.hp.com/sk-en/documen…
💥Lenovo: support.lenovo.com/us/en/pro…
🔥NVD CVSS score: 8.8 High (CWE-78)
nvd.nist.gov/vuln/detail/CVE…
Noise Security Bit retweeted
🔥New finding! We have confirmed that previously leaked Intel BootGuard private keys from Lenovo/LCFC in September 2022 are still relevant for numerous devices in the field (Lenovo, Supermicro, Intel ...).
⛓️github.com/binarly-io/Supply…
🔬FwHunt: github.com/binarly-io/FwHunt…
Noise Security Bit retweeted
⛓️Thank you @IntelSecurity for fixing the incomplete RSB stuffing SMM mitigation (#FirmwareBleed/CVE-2022-38087).
💥BRLY: binarly.io/advisories/BRLY-2…
💥Intel: intel.com/content/www/us/en/…
💥IBM:
ibm.com/support/pages/node/6…
💥Dell: dell.com/support/kbdoc/en-us…
🔬Details: binarly.io/posts/FirmwareBle…
Noise Security Bit retweeted
Intel BootGuard, Firmware Signing Keys Found in MSI Data Leak decipher.sc/intel-bootguard-… #decipher #deciphersec
Noise Security Bit retweeted
FYI: Intel BootGuard OEM private keys leak from MSI cyber-heist reg.cx/48qw?utm_source=twitt…