How Risk Executives Are Managing New Firmware Threats
Happy to share the video webinar of a powerhouse panel discussing the challenges and risks of firmware based cyberattacks. Moderated by Robert Rodriquez, founder of SINET, the panelists included David Hahn, Yuri Bulygin, Steve Orrin, Malcolm Harkins, and myself.
Over a dozen different firmware components exist in every PC and twice as much in servers. Firmware controls basic hardware functions in every network and IoT device. As attackers seek to exploit vulnerabilities in this core layer, cybersecurity risk professionals are pivoting to improve their knowledge and adapt their defensive mitigation tactics.
The panel discussed the:
- Risks and challenges with firmware security and how it must be incorporated into the baseline cybersecurity models.
- How and why attackers are taking advantage of firmware-based exploits
- Availability of off-the-shelf boot-level attack kits
- Concerns for UEFI-level tactics are being shared in dark web forums that can go unnoticed by traditional vulnerability, risk and end endpoint security programs.
- Limitations of traditional security tools to detect firmware tampering, compromises, and malicious activities
SINET Webinars: https://www.security-innovation.org/sinetlive/on-demand-webinars/
Thanks for watching! Please click the Like button if you found this insightful, leave a comment, and subscribe to the Cybersecurity Insights channel for more best-practices, rants, and strategic viewpoints. https://www.youtube.com/c/CybersecurityInsights
Follow me on:
LinkedIn: https://www.linkedin.com/today/author/matthewrosenquist
Medium: https://medium.com/@matthew.rosenquist
Twitter (@Matt_Rosenquist): https://twitter.com/Matt_Rosenquist
▶️ 3Speak
Leave How Risk Executives Are Managing New Firmware Threats to:
Read more #cybersecurity posts
Best Posts From Matthew Rosenquist
We have not curated any of mrosenquist1's posts yet. But you can encourage our curation team to review posts by visiting them regularly and by referring other readers. Because we give priority to frequently read content.
More Posts From Matthew Rosenquist
- Whistleblower Testifies to Congress about Twitter Security Flaws
- Albania Expels Iranian Diplomats Over Cyber Attack
- Lloyd’s New Cyber Insurance Exclusions Aim to Avoid Payouts from Nation State Hacks
- Happy International Privacy Day
- Taxonomy of Cybersecurity Roles & Responsibilities with Deidre Diamond
- Vlog - Why is Norton adding a cryptocurrency miner to their product and should we be worried?
- Finding the Next SolarWinds Type of Supply Chain Attack
- 2022 Cybersecurity Predictions
- Cybersecurity Insights - Criminalizing Ransomware Payments with Malcolm Harkins
- Cybersecurity Insights - Deficient Forethought for Digital Technology Risks with Alexander Stein