Yuriy Bulygin

@eclypsium, @CHIPSEC. Former @intel, @IntelSecurity, @McAfee

[David Senra @davidsenra]

"Peter Thiel says, you have to be contrarian but right to be an entrepreneur.

So, you have to be comfortable looking stupid for a long time.

When I was calling those banks and saying, "Hey, we're a crypto company. We want to do this," they would hang up on me.

Or I'd go pitch the 30th venture investor and get a no.

Or the thousandth employee we tried to hire or whatever.

We're willing to be misunderstood for a long time.

And then you slowly start to have these breakthroughs.

If you look at Uber, they were fighting for a decade to just be like, yeah, it's actually better and safer than a cab — and the entrenched interests were fighting them.

Or Airbnb with the hotels.

Self-driving cars.

Everything that's truly innovative and breakthrough is going to upset an entrenched incumbent, eventually intersect with the government, and just piss off some segment of the population who are like...

"How dare you question the status quo."

— @brian_armstrong

[hasherezade @hasherezade]

I've got some really cool gift recently... UEFI Petya PoC: https://t.co/NH0XgugFHB 😁

[Paul Asadoorian @[email protected] @securityweekly]

The BadCAM research has been published! Why is this significant? Attackers can now weaponize connected USB peripherals that run Linux and do not validate firmware signatures.

[Richard Johnson @richinseattle]

If you use llamafile, llama.cpp, llama-cpp-python, Oobabooga, LMStudio or any other software that exposes llama.cpp grammar sampling, I found a few remotely exploitable bugs triggered through a single web request that got patched today. More to come from my work at @Eclypsium

[Bill Demirkapi @BillDemirkapi]

found a critical bug that exists in every Linux boot loader signed in the past decade 🥰 https://t.co/kjATsR4uvJ

[Yuriy Bulygin @c7zero]

@HackingThings 😬

[Yuriy Bulygin @c7zero]

Added #downfall detection via content update

[Eclypsium @eclypsium]

A recent update to the Eclypsium platform allows customers to detect one of the latest hardware attacks against Intel processors dubbed "Downfall." Downfall allows attackers to steal data from other processes, such as cryptographic keys. Fixes are available for certain platforms.

[Jeremy Boone @uffeux]

I found a remote(-ish) memory corruption bug in Intel's BIOS. Bluetooth HID Report parsing is yucky

https://t.co/8s0uQGMo4z

[Andy Greenberg (@agreenberg at the other places) @a_greenberg]

Hundreds of models of Gigabyte motherboards, used in gaming and other high-performance computers, have a backdoor in their firmware that invisibly downloads code to the machine at startup—and does so insecurely, leaving the feature open to abuse. https://t.co/pHNj6GN1ue

[Eclypsium @eclypsium]

Eclypsium analysis found a backdoor in Gigabyte systems implementing intentional functionality during system startup. Due to significant #supplychainrisk, we're disclosing this info & defensive strategies on an accelerated timeline >> https://t.co/HgmUUmFPq2
#supplychainsecurity

[Yuriy Bulygin @c7zero]

ShadowHammer campaign all over again but with MSI now

[Greg Linares (Laughing Mantis) @Laughing_Mantis]

Attention anyone having an MSI motherboard or computer. MSI just said they were hacked and attackers might have tried modifying BIOS and software updates.

Disable all updates from MSI for the time being

https://t.co/7bm7yYT0Nv

[Yuriy Bulygin @c7zero]

Such a loss :(

[Summercon @SummerC0n]

It is with profound sadness that we mourn the loss of our friend and mentor, @aloria. Kelly had an indomitable spirit, and our world is a bit darker without her.

[hasherezade @hasherezade]

New release: #TinyTracer v2.3 : https://t.co/Ajq09c2TUQ - with improved syscalls tracing support - now syscalls are automatically mapped to corresponding functions names

[Eclypsium @eclypsium]

It's no surprise that supply chain security has become a top national priority. In its recently-published SP 1800-34, NIST hones in on one of the most important, challenging aspects of #supplychainsecurity — devices. Here, we highlight the key takeaways. https://t.co/0yeHMzb7Jm

[Flashback Team @FlashbackPwn]

We finally released our research about an 0day RCE we found on the Western Digital PR4100 NAS device. Check it out on our NEW WEBSITE: https://t.co/uTWcu9e8kB

[Mickey @HackingThings]

Are you looking to learn about Bootkits, Rootkits, SMM or UEFI exploitation and debug?
With this @_ringzer0 class you will gain hands-on experience in these and more!

https://t.co/QIJl8Aspdy
#RETURN23XPLOIT #offensivesecurity #Training

[Yuriy Bulygin @c7zero]

New Year wish is for Russia to fuck off

[Eclypsium @eclypsium]

Our team has discovered 3 vulnerabilities in American Megatrends, Inc. MegaRAC Baseboard Management Controller software.These vulnerabilities range in severity & include remote code execution & unauthorized device access w/superuser permissions.More here! https://t.co/Pirsj71UiR