Hello friends. Check out this awesome and unique role that just opened up on my team in SEAR. Wanna secure Apple silicon, ROMs, iBoot, and more? https://t.co/0NMPs77lZt
Broadcom and Cypress chips have the same HCI "backdoor" allowing to write to the Bluetooth chip's RAM. This feature is used for firmware patches.
We didn't request CVEs for that 9 years ago. Instead, we built the InternalBlue Bluetooth research framework.
https://t.co/nSo82jRRuU
@evilsocket any interest in working on security in compilers? my team is looking for someone with a peculiar intersection of skills/interests:
https://t.co/d3xvJVipeB
🔺New on the Apple Security Research blog: introducing Private Cloud Compute! We believe this is the most advanced security architecture ever deployed for cloud AI compute at scale. https://t.co/bsrpkCdivX
Are you excited to use the power of safe modern programming languages like Swift to make software more secure? My SPEAR team at Apple is hiring a Swift Software Engineer to do exactly that! https://t.co/ZkmCkvmAf8
🔺New on the Apple Security Research blog: introducing PQ3, a groundbreaking post-quantum cryptographic protocol for iMessage. To our knowledge, PQ3 has the strongest security properties of any at-scale messaging protocol in the world. https://t.co/NIyeXjVne6
Is remote code execution in UEFI firmware possible?
Yes it is.
Meet #PixieFAIL: 9 vulnerabilities in the IPv6 stack of EDK II, the open source UEFI implementation used by billions of computers.
Full details by @fdfalcon and @4Dgifts in our new blog post:
https://t.co/g4Bg2GK4Y8
Is remote code execution in UEFI firmware possible?
Yes it is.
Meet #PixieFAIL: 9 vulnerabilities in the IPv6 stack of EDK II, the open source UEFI implementation used by billions of computers.
Full details by @fdfalcon and @4Dgifts in our new blog post:
https://t.co/g4Bg2GK4Y8
Shooting Yourself in the .flags – Jailbreaking the Sonos Era 100
The Era 100 is Sonos’s flagship device, released on March 28th 2023. NCC found weaknesses within the bootloader which can lead to full compromise of the device.
https://t.co/h5LBbUJe7g
https://t.co/8JkcXU3y7H
@ryanaraine According to the sequence of steps in this document, I am still stuck at Step #1 after 300+ days. Tianocore hasn't even begun to engage IFVs, ODMs or OEMs. I think the Tianocore PSIRT lives in a time dilation vortex.
@ryanaraine I reported 2 vulns in EDK2 that are still unfixed. They are... let me check... 336 days old. Tianocore security team ghosted me. Had to engage downstream vendors to get any traction whatsoever. Still, no fix in sight.
Public Report – Caliptra Security Assessment During August and September of 2023, Microsoft engaged NCC Group to conduct a security assessment of Caliptra v0.9. The assessment identified 26 vulnerabilities, which were promptly addressed by the Caliptra... https://t.co/A9d5DaZxTo
Public Report – Caliptra Security Assessment During August and September of 2023, Microsoft engaged NCC Group to conduct a security assessment of Caliptra v0.9. The assessment identified 26 vulnerabilities, which were promptly addressed by the Caliptra... https://t.co/a1IrC4NK9S