Have you looked below the operating system layer on your devices? If you haven’t, you may be shocked to learn the vulnerabilities that lie at the firmware level.
Join Paul Asadoorian (Podcast Personality at Security Weekly) who recently joined Eclypsium as the Firmware Security Evangelist, on techniques you can use to evaluate the state of security on the firmware-based devices that live inside your laptops, desktops, and servers.
- Using Linux/open-source utilities such as dmidecode, dbxtool, and chipsec to explore device firmware
- Enabling Secure Boot and its components (and keeping your DBX up-to-date!)
- Enumerating and updating firmware within your system using LVFS (Linux Vendor Firmware Service)
- Discovering Intel ME and associated vulnerabilities
- Checking your system for the Boothole vulnerability
