Shrug & Move On - ASW #160

<p>This week, we welcome Maggie Jauregui, Offensive Security Researcher at Intel, to discuss Platform Firmware Security! Firmware security is complex and continues to be an industry challenge. In this podcast we'll talk about the reasons firmware security remains a challenge and some best practices around platform security.</p> <p> </p> <p>In the AppSec News: PunkSpider coming to DEF CON, Google matures its VRP, $50K bounty for an access token, RCE in PyPI, kernel vuln via eBPF, top vulns reported by CISA, & the importance of testing!</p> <p> </p> <p>Show Notes: <a href= "https://securityweekly.com/asw160">https://securityweekly.com/asw160</a></p> <p>Segment Resources:<br /> - <a href= "https://www.helpnetsecurity.com/2020/04/27/firmware-blind-spots/">https://www.helpnetsecurity.com/2020/04/27/firmware-blind-spots/</a></p> <p>- <a href= "https://www.helpnetsecurity.com/2020/09/28/hardware-security-challenges/"> https://www.helpnetsecurity.com/2020/09/28/hardware-security-challenges/</a></p> <p>- <a href= "https://darkreading.com/application-security/4-open-source-tools-to-add-to-your-security-arsenal"> https://darkreading.com/application-security/4-open-source-tools-to-add-to-your-security-arsenal</a></p> <p>- <a href= "https://chipsec.github.io">https://chipsec.github.io</a></p> <p>Hardware Hacking created by Maggie:<br /> <a href= "https://securityweekly.com/wp-content/uploads/2021/08/eArt-2.png">https://securityweekly.com/wp-content/uploads/2021/08/eArt-2.png</a></p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/asw">https://www.securityweekly.com/asw</a> for all the latest episodes!</p> <p>Follow us on Twitter: <a href= "https://www.twitter.com/securityweekly">https://www.twitter.com/securityweekly</a></p> <p>Like us on Facebook: <a href= "https://www.facebook.com/secweekly">https://www.facebook.com/secweekly</a></p>