Below the Surface (Audio) - The Supply Chain Security Podcast
A lively discussion of the threats affecting supply chain, specifically focused on firmware and low-level code that is a blind spot for many organizations. This podcast will feature guests from the cybersecurity industry discussing the problems surrounding supply chain-related issues and potential solutions. Get the Supply Chain Security Toolkit from Eclypsium here: https://eclypsium.com/go
10
Memory Safety, AI security, Auth Challenges
<p> summary</p> <p>In this episode, the hosts discuss various cybersecurity vulnerabilities, focusing on a recent remote code execution vulnerability in Nginx, the role of AI in discovering vulnerabilities, and the importance of memory safety in programming languages. They also explore the challenges of authentication in IoT devices and the need for better secure development practices. The conversation highlights the fragility of IoT infrastructure and the ongoing threat posed by attackers leveraging AI for malicious purposes. In this conversation, the speakers delve into the complexities of cybersecurity, focusing on the challenges posed by AI models, regulatory capture, and the i...
AI's Impact on Cybersecurity
<p> summary</p> <p>In this episode, Paul and Vlad discuss the increasing role of AI in cybersecurity, particularly in vulnerability discovery and exploit creation. They explore the implications of AI on the speed and efficiency of attacks, the state of network edge appliances, and the necessity for device hardening. The conversation also touches on the challenges of monitoring and forensics in network devices, emphasizing the ongoing cat-and-mouse game between attackers and defenders. In this conversation, Vlad and Paul delve into various aspects of cybersecurity, focusing on network appliances, AI safety, and the challenges posed by vulnerabilities in management platforms. T...
Firmware Analysis, Linux Malware, Future of AI
<p>In this episode of Below the Surface, the hosts discuss cybersecurity topics, including vulnerabilities in UEFI shells, vendor trust issues, Citrix's new dual-boot solution, and techniques for bypassing Windows Defender. They also explore the implications of AI in Linux environments and the ongoing controversy surrounding AI math theft. In this conversation, Vlad and Paul discuss OpenAI's recent controversial achievement in solving a significant mathematical problem, raising ethical concerns about data usage and the implications for the AI community. They explore the future of local AI models, innovations in firmware analysis tools, and techniques attackers use on Linux systems. The...
Infratrust Pulse, AI's Role in Security
<p>In this episode, Paul and Vlad discuss the latest Infratrust Pulse report, highlighting vulnerability trends, the role of AI in cybersecurity, and the importance of visibility and control in network security. They delve into threats posed by BMCs and management planes, the challenges of persistence mechanisms, and the need for better vendor responsiveness and API practices to strengthen security. In this conversation, Vlad and Paul discuss the evolving role of AI in cybersecurity, particularly its use by threat actors to exploit vulnerabilities. They explore the implications of AI in vulnerability discovery, the importance of secure software development practices, and...
Exploring BMC Vulnerabilities
<p>Summary</p> <p>In this episode, the hosts discuss various cybersecurity topics, including the lack of media coverage from the Black Hat conference, the implications of AI in cybersecurity, and the vulnerabilities associated with Baseboard Management Controllers (BMCs). They explore the challenges of patch management, the role of embedded Linux in security vulnerabilities, and the emerging trends in threat actor behavior. The conversation emphasizes the need for better awareness and action regarding BMC vulnerabilities and the importance of understanding the risks associated with AI in security. In this conversation, the speakers delve into the complexities of operational risks associated...
InfraTrust - Understanding Infrastructure Vulnerabilities & Risk
<p>Check out our free and no-registration-required site for understanding and tracking infrastructure vulnerabilities and advisories: https://infra-trust.org </p> <p>In this episode, the hosts discuss the challenges of collecting and aggregating vulnerability data, the introduction of Infratrust and Infratrust Pulse, and the importance of actionable data for cybersecurity teams. They explore the differences between vendor advisories and CVEs, the role of Eclipsium in data aggregation, and the ongoing challenges in vulnerability management and patching. The conversation highlights the need for a centralized source of truth for infrastructure vulnerabilities and the evolving landscape of cybersecurity threats. In this conversation, t...
Patching: The Race Against Time
<p>In this episode, the hosts discuss various vulnerabilities affecting network devices, the importance of timely patching in enterprises, and the implications of AI on security. They explore the challenges of compliance programs, the significance of dependency management in software, and the need for better privilege separation in network devices. The conversation also touches on the risks of supply chain attacks and the detection of orphaned packages in software ecosystems.</p> <p>Chapters</p> <p>00:00 Introduction to Vulnerabilities and Security Trends<br /> 02:49 Router Choices and Security Implications<br /> 10:41 The Need for Faster Patching in Enterprises<br /> 12:22 The Impact of AI...
FortiBleed Uncovered: How Attackers Harvest Credentials from Fortinet Devices
<p>In this episode, we delve into the recent FortiBleed campaign, exploring how attackers harvest credentials from Fortinet devices, the vulnerabilities in password management, and best practices for defenders to mitigate such threats.</p> <p>Key topics</p> FortiBleed campaign details and impact Password hash vulnerabilities in FortiOS AI's role in analyzing large security breaches Credential harvesting techniques and defenses Importance of layered security and best practices <p>Chapters</p> <p>00:00 Introduction and Initial Thoughts on AI Models<br /> 10:04 Credential Harvesting and Security Weaknesses<br /> 19:58 Hash Management and Security Appliances<br /> 30:15 Incident Response and Vulnerability Management<br /> 39:46 The Future of S...
Binwalk, Brickstorm, AI Model Madness
<p> summary</p> <p>In this episode of Below the Surface, Paul Asadoorian, Chase Snyder, and Vlad Babkin discuss the implications of AI in cybersecurity, the challenges posed by AI guardrails, and the operational risks associated with applying patches. They also explore vulnerabilities in security tools like Binwalk, the complexities of firmware update tools, and the importance of transparency in software signing, particularly in the context of open source software. In this conversation, the speakers delve into the complexities of cybersecurity, focusing on the limitations of security through obscurity, the challenges posed by UEFI shells and secure boot, and the o...
Secure Boot Certificates Expiring: What You Need to Know
<p>In this episode of Below the Surface, the team discusses recent cybersecurity trends, including the Verizon DBIR 2026 report, secure boot certificate expirations, and the evolving threat landscape with AI and hardware vulnerabilities. They explore how organizations can adapt their defense strategies to stay ahead of attackers and share insights on supply chain security and malware analysis.</p> https://eclypsium.com/blog/microsoft-secure-boot-certificates-expire-2026/ https://eclypsium.com/blog/verizon-dbir-2026/ https://github.com/iss4cf0ng/OpenPetya https://gbhackers.com/exploit-f5-big-ip-ssh-access/ https://www.microsoft.com/en-us/security/blog/2026/05/22/from-edge-appliance-to-enterprise-compromise-multi-stage-linux-intrusion-via-f5-and-confluence/ https://cybersecuritynews.com/china-linked-hackers-target-southeast-asian-edge-routers/ https://qiita.com/Y4er/items/0b6071745e4b7b...
