Below the Surface (Audio) - The Supply Chain Security Podcast
by Eclypsium
Latest episode
Memory Safety, AI security, Auth Challenges - BTS #84
Memory Safety, AI security, Auth Challenges - BTS #84
About this podcast
A lively discussion of the threats affecting supply chain, specifically focused on firmware and low-level code that is a blind spot for many organizations. This podcast will feature guests from the cybersecurity industry discussing the problems surrounding supply chain-related issues and potential solutions.
Get the Supply Chain Security Toolkit from Eclypsium here: https://eclypsium.com/go
Episodes
The newest 20 of 84 episodes
- Memory Safety, AI security, Auth Challenges - BTS #84 · 52 min · Episode 84summary In this episode, the hosts discuss various cybersecurity vulnerabilities, focusing on a recent remote code execution vulnerability in Nginx, the role of AI in discovering…
- AI's Impact on Cybersecurity - BTS #83 · 51 min · Episode 83summary In this episode, Paul and Vlad discuss the increasing role of AI in cybersecurity, particularly in vulnerability discovery and exploit creation. They explore the…
- Firmware Analysis, Linux Malware, Future of AI - BTS #82 · 60 min · Episode 82In this episode of Below the Surface, the hosts discuss cybersecurity topics, including vulnerabilities in UEFI shells, vendor trust issues, Citrix's new dual-boot solution, and…
- Infratrust Pulse, AI's Role in Security - BTS #81 · 52 min · Episode 81In this episode, Paul and Vlad discuss the latest Infratrust Pulse report, highlighting vulnerability trends, the role of AI in cybersecurity, and the importance of visibility…
- Exploring BMC Vulnerabilities - BTS #80 · 59 min · Episode 80Summary In this episode, the hosts discuss various cybersecurity topics, including the lack of media coverage from the Black Hat conference, the implications of AI in…
- InfraTrust - Understanding Infrastructure Vulnerabilities & Risk - BTS #79 · 55 min · Episode 79Check out our free and no-registration-required site for understanding and tracking infrastructure vulnerabilities and advisories: https://infra-trust.org In this episode, the…
- Patching: The Race Against Time - BTS #78 · 56 min · Episode 78In this episode, the hosts discuss various vulnerabilities affecting network devices, the importance of timely patching in enterprises, and the implications of AI on security…
- FortiBleed Uncovered: How Attackers Harvest Credentials from Fortinet Devices - BTS #77 · 55 min · Episode 77In this episode, we delve into the recent FortiBleed campaign, exploring how attackers harvest credentials from Fortinet devices, the vulnerabilities in password management, and…
- Binwalk, Brickstorm, AI Model Madness - BTS #76 · 1 h 0 min · Episode 76summary In this episode of Below the Surface, Paul Asadoorian, Chase Snyder, and Vlad Babkin discuss the implications of AI in cybersecurity, the challenges posed by AI…
- Secure Boot Certificates Expiring: What You Need to Know - BTS #75 · 56 min · Episode 75In this episode of Below the Surface, the team discusses recent cybersecurity trends, including the Verizon DBIR 2026 report, secure boot certificate expirations, and the…
- YellowKey, CVE Enrichment, Chipmaker Breach - BTS #74 · 55 min · Episode 74In this episode, we explore recent vulnerabilities, the YellowKey BitLocker bypass, supply chain security, CVE data analysis, and the implications of hardware breaches like the…
- Uncovering Firmware Risks: From Y2K to Modern Malware - BTS #73 · 55 min · Episode 73In this episode of Below the Surface, hosts Paul Asadoorian, Chase Snyder, and guest Brian Richardson explore the evolution of firmware security, the risks of supply chain…
- AI-Powered Firmware Hacking: The Future of Vulnerability Discovery - BTS #72 · 59 min · Episode 72In this episode, the hosts explore the latest in cybersecurity, including AI-driven vulnerability discovery, firmware analysis tools, secure boot complexities, and recent CVE…
- What Makes a Device a Router? - BTS #71 · 1 h 1 min · Episode 71summary In this episode, the hosts discuss the new FCC regulations regarding consumer routers, exploring the implications for cybersecurity, the definitions of what constitutes a…
- How Cheap KVMs Could Be Your Network's Weak Link - BTS #70 · 1 h 2 min · Episode 70In this episode, we explore the security vulnerabilities of low-cost IP-based KVMs, including firmware flaws, default credentials, and insecure update mechanisms. Two Eclypsium…
- Navigating Network Edge Vulnerabilities - BTS #69 · 1 h 4 min · Episode 69In this episode of Below the Surface, Paul Asadoorian, Vlad Babkin, and Adrian Sanabria discuss the ongoing vulnerabilities in network edge devices, the implications of legacy…
- Attacking Power Grids - BTS #68 · 1 h 2 min · Episode 68In this episode, the hosts discuss various cybersecurity threats, including Russian cyber attacks on critical infrastructure, the vulnerabilities in firewalls and VPNs, and the…
- BIOS Password Cracking, Secure Boot, and Stackwarp - BTS #67 · 1 h 0 min · Episode 67In this episode, the hosts discuss various cybersecurity topics, including the challenges of BIOS password cracking, the implications of AMD's Stack Warp vulnerability, and the…
- Beyond the Label: The Truth About Hardware Trust - BTS #66 · 57 min · Episode 66In this episode of Below the Surface, host Paul Asadoorian is joined by co-hosts Larry Pesci, Joshua Marpet, and Vlad Babkin to delve into the complexities of hardware supply…
- Exploring AI in Firmware Analysis - BTS #65 · 1 h 0 min · Episode 65Summary In this episode, special guest Matt Brown joins us to discuss the integration of AI in firmware analysis, exploring its benefits and challenges. We delve into the…
