Firmware is the New Black - Analyzing Past Three Years of BIOS/UEFI Security Vulnerabilities
Presenters detail vulnerability discovery and exploitation in Firmware is the New Black - Analyzing Past Three Years of BIOS/UEFI Security Vulnerabilities.
Summary
Analysis of three years of BIOS and UEFI security vulnerabilities.
Related talks
Black Hat·52 min
Andrey Labunets · Philip Lebedev · Alex Matrosov · Yegor Vasilenko
Engineers explore architecture and security mechanisms for efiXplorer: Hunting for UEFI Firmware Vulnerabilities at Scale with Automated Static Analysis.
RSAC Cybersecurity·42 min
Engineers explore architecture and security mechanisms for UEFI Bootkits and Where UEFI Security Fails.
Main Stage·39 min
Mickey Shkatov · Jesse Michael
Eclypsium researchers disclose critical vulnerabilities in Dell BiosConnect, demonstrating TLS certificate verification bypasses to execute RCE during UEFI updates.