Episode

UEFI Vulnerabilities and Hardware Risks - BTS #58

Podcast
Below the Surface (Audio) - The Supply Chain Security Podcast
Published
Sep 4, 2025
Duration seconds
3680
Processing state
not_requested
Canonical source
https://belowthesurfacesw.libsyn.com/uefi-vulnerabilities-and-hardware-risks-bts-58
Audio
https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/belowthesurfacesw/bts58.mp3?dest-id=3822522
JSON
/v1/public/podcasts/below-the-surface-audio-the-supply-chain-security-podcast-5987778/episodes/uefi-vulnerabilities-and-hardware-risks-bts-58
Markdown
/podcast/below-the-surface-audio-the-supply-chain-security-podcast-5987778/uefi-vulnerabilities-and-hardware-risks-bts-58.md

Actions

  • POST https://stenobird.com/v1/public/podcasts/below-the-surface-audio-the-supply-chain-security-podcast-5987778/episodes/uefi-vulnerabilities-and-hardware-risks-bts-58/transcription-requests
    Idempotently request low-priority transcript generation for this episode.
  • GET https://stenobird.com/podcast/below-the-surface-audio-the-supply-chain-security-podcast-5987778/uefi-vulnerabilities-and-hardware-risks-bts-58.md
    Read the agent-friendly Markdown representation of this episode resource.

Summary

In this episode, the hosts discuss various cybersecurity topics, focusing on hardware vulnerabilities, UEFI attack vectors, and the implications of new regulations on device security. They explore the evolution of Mirai variants targeting IoT devices and the challenges of securing firmware. The conversation highlights the need for improved security measures and the complexities of managing vulnerabilities in a rapidly changing technological landscape. 00:00 Introduction and Technical Challenges 02:37 Exploring UEFI Settings and Hardware Vulnerabilities 10:14 The Risks of UEFI Control and Physical Damage 16:33 Static Tundra: Cyber Espionage and Exploits 22:23 Targeting Vulnerable Infrastructure in Cyber Attacks 26:27 Emerging Threats in IoT and Network Devices 31:55 The Evolution of Malware: A Deep Dive 34:30 The Challenge of Securing IoT Devices 35:13 Impact of EU Cyber Resilience Act 38:14 Vulnerability Management and Vendor Responsibilities 41:54 Living Outside the Operating System: New Attack Vectors