Uncovering Firmware Risks: From Y2K to Modern Malware - BTS #73

In this episode of Below the Surface, hosts Paul Asadoorian, Chase Snyder, and guest Brian Richardson explore the evolution of firmware security, the risks of supply chain vulnerabilities, and the latest threats targeting network edge devices like Cisco ASA and FTD. They discuss historical malware like the Chernobyl virus, modern malware campaigns such as Firestarter, and the challenges of securing complex network infrastructure in a rapidly evolving threat landscape.

Links:

https://www.linkedin.com/news/story/white-house-pushes-back-on-anthropics-mythos-expansion-8741242/

https://www.tomshardware.com/tech-industry/cyber-security/the-chernobyl-virus-turned-27-today-and-it-could-brick-your-pc-in-ways-modern-malware-cant

https://blog.talosintelligence.com/uat-4356-firestarter/

Chapters

00:00 Introduction to Below the Surface

02:20 Brian's Transition to Eclipseum

03:50 The Y2K Experience and Early Virus Detection

06:31 The CIH Virus and Its Impact

10:12 BIOS Security and Vulnerabilities

14:10 The Importance of Firmware Lockdown