3 ms·
"blacklist any firmware upgrade from unhardened machines." This is interesting, is it related to some specific OS or Bios?
by nonsapreiche 5y ago
"blacklist any firmware upgrade from unhardened machines."
This is interesting, is it related to some specific OS or Bios?
- rolph 5y agosupply chain attacks can consist of malicious firmware updates. any device that is subjected to frequent firmware updates has an elevated potential to be attacked and compromised at the hardware level. Firmware should be vetted as should be the supply chain, and this is the usual case. examining firmware for exploitive content is non trivial,and if you operate mission critical infrstructure you should have a probate machine to recieve suspect firmware for examination of its subsequent operation, before full deployment. routerlevel, or edge machine blockade of firmware supply domains should be default with internal distribution of probated firmware until trust is established.