Founder of Security Weekly, Principal Security Evangelist at Eclypsium
Rhode Island
Based in United States
- Tweets 18,706
- Following 8,520
- Followers 74,520
- Likes 2,977
Every so often, a single CVE manages to demonstrate everything that is broken about how we discover, track, and remediate vulnerabilities, and CVE-2026-7473 in Arista EOS is one of those, which is exactly why I wrote it up.
1
4
4
1,439
Funny, I just retired this graphics card as the latest NVidia drivers for Linux no longer support it (older drivers still work). I replaced it with an AMD...
28
16
1,176
81,213
And what do you remember most about older computers? I'll go first: "Get off the phone, I need to use the internet" was a real statement back in the day
1
1
4
821
I believe we do not pay enough attention to default and weak passwords. What's your solution?
1
3
20
1,475
The worst I encountered recently was an Asus device that required me to power it on, then power off when the Asus logo appeared 3 times to get it in recovery mode!
6
635
Ethernet cables have so many uses! Have you used them in creative ways? I've totally used them to prop open doors, tie up rolls of carpet, etc...
5
727
This is how many view firmware updates. Wishing for the best is not the best security strategy...
2
694
We found 9 vulnerabilities across 4 low-cost IP-KVM vendors. These $30 devices give attackers the equivalent of physical access to everything they connect to. Below the OS, EDR, and pretty much every security control you've deployed.
15
53
270
32,949
Senior developers with experience use AI and create great things, but will we reach a point where we have no more senior developers, and everyone is using AI to code?
2
2
10
1,039
As I read and listen to responses to the new CA law, a theme emerged: the Linux community thinks this is ridiculous and is unlikely to comply (and compliance would be next to impossible to enforce...)
2
10
843
This week’s reporting on the alleged Everest ransomware breach of ASRock Rack should be a wake-up call for anyone relying on modern server, storage, and cloud hardware. When an enterprise vendor’s internal repositories of firmware, BIOS, BMC code, diagnostic tools, and drivers are exposed, supply chain integrity is in jeopardy.
Adversaries gain insight into board layouts, update mechanisms, and secure boot flows, which accelerates vulnerability discovery and makes it easier to craft implants that look “authentic”. Implants come in many shapes and forms,s including repackaged drivers, UEFI images, and recovery media. In the worst case, compromise at this level undermines the hardware root of trust itself: if attackers can subvert firmware signing, update channels, or UEFI components, they can persist below the operating system, survive reimaging, and silently bypass many controls.
Incidents like this underscore that supply-chain attacks targeting firmware and UEFI are now strategic targets, not edge cases. Defenders need to assume that detailed knowledge of platform internals is in adversary hands and respond by monitoring below the OS as a first-class requirement. Measuring firmware integrity at boot, continuously attesting critical components (UEFI, BMC, NICs, RAID controllers), and watching out-of-band management paths for anomalous behavior is important. The trust model for infrastructure is shifting, and security programs that do not include firmware and UEFI telemetry are already behind the curve.
Article: cyberdaily.au/security/13120…
4
2
2,612
My kids love soccer, and they are in a fantastic program here in Coventry, RI. Parents, coaches, and players represent a community of outstanding people. If you buy some popcorn, we'd greatly appreciate your support! Thank You! Link: popup.doublegood.com/s/3z4u4…
1
818
