iiinova — where your digital self keeps evolving

Reposted by Fabio Pagani

Usenix WOOT Conference on Offensive Technologies @wootsecurity.bsky.social · 28/02/2025

Only a week and a half left for USENIX WOOT '25 conference submissions - deadline March 11 AoE. We’re looking forward to seeing even more of your amazing offensive security papers this year! And still a few days for up-and-coming track (March 4). CfP at www.usenix.org/conference/w...

0510

Reposted by Fabio Pagani

lukas seidel @pr0me.bsky.social · 01/01/2025

happy new year 🎉 to continue the tradition, here is some of my favorite firmware & embedded security research of 2024: Defeating the new Raspberry Pi's RP2350 Security Features [1] Reversing and Hacking Firmware of an in-orbit Satellite to Re-establish Lost Communication [2]

2106

Reposted by Fabio Pagani

SentinelOne @sentinelone.com · 13/12/2024

In case you missed it from #LABScon24: BINARLY’s @matrosov.bsky.social and @pagabuc.bsky.social reveal their research into a firmware supply-chain security issue that affected major device vendors and hundreds of models, PKfail. 📺 Watch the full video: s1.ai/PKfail

183

Reposted by Fabio Pagani

SentinelOne @sentinelone.com · 04/12/2024

📺 #LABScon 2024 Replay: @matrosov.bsky.social and @pagabuc.bsky.social reveal their research into a firmware supply-chain security issue that affected major device vendors and hundreds of models, PKfail. 👉 Watch the full video: s1.ai/PKfail

151

Reposted by Fabio Pagani

Dan Goodin @dangoodin.bsky.social · 29/11/2024

Code circulating in the wild hijacks the earliest stage boot process of Linux devices by exploiting a year-old UEFI vulnerability known as LogoFAIL when it remains unpatched. The ultimate objective of the exploit is to install a new Linux bootkit named Bootkitty. arstechnica.com/security/202...

arstechnica.com

Code found online exploits LogoFAIL to install Bootkitty Linux backdoor

Unearthed sample likely works against Linux devices from Acer, HP, Fujitsu, and Lenovo.

01510