Psycle Interactive retweeted
Some exciting research to share from Binarly REsearchers @cci_forensics and @pagabuc -- a novel approach to UEFI bootkit detection.
🔥Read the technical paper: "UEFI Bootkit Hunting: In-Depth Search for Unique Code Behavior"
👉 binarly.io/blog/uefi-bootkit…
Psycle Interactive retweeted
NEW! On the 'Three Buddy Problem' pod, we dig into the latest exploited Apple iPhone zero-day (USB Restricted Mode bypass), an AMD microcode flaw so serious it’s not being fully disclosed, a barrage of Patch Tuesday 0days, and some interesting Russian threat actor things... @craiu @juanandres_gs
(show links in comments)
Psycle Interactive retweeted
Another outstanding piece of REsearch from the Binarly team! 💪
Trusting the trust is always a complex challenge 🧐
🚨Secure Boot relies on revocation lists (dbx) to block malicious bootloaders, but discrepancies between the @UEFIForum & @Microsoft lists create security gaps.
👉Call for a single and openly maintained revocation list -- a unified source of truth!
binarly.io/blog/from-trust-t…
Psycle Interactive retweeted
What’s hiding in your firmware? 👀 Meet us at #BlackHatEurope to find out. Binarly is showcasing Binary Risk Hunt, the free tool exposing vulnerabilities, leaked keys & more!
🎟️ Schedule here: binarly.io/meet-binarly-at-b…
⚙️ Scanner: risk.binarly.io
Psycle Interactive retweeted
Last year, we announced our Secure AI Framework to help others deploy secure-by-default AI models. Today, we’re introducing SAIF.google, an interactive risk assessment tool and resource hub to put SAIF principles into action. Learn more ↓ goo.gle/3A1BXvR
It's been a great privilege to work with the Google SAIF team to bring this important project to life. If you are working with AI models, it's definitely worth checking out.
Google is advancing its SAIF AI framework by bringing a "Risk Assessment" to AI model creators to improve system security.
trib.al/i09Xdf6
Psycle Interactive retweeted
🏆Our REsearch team is proud to have stepped onto the @LABScon_io keynote stage for the third year!
🔐Huge shoutout to our speakers, @pagabuc and @matrosov, who presented “#PKFAIL: Supply-Chain Failures in Secure Boot Key Management.”
🔥slides: github.com/binarly-io/Resear…
Psycle Interactive retweeted
🚨In just a few hours at #LABScon, we’ll be unveiling a high-impact vulnerability and a critical security discovery affecting platform trust on Supermicro servers. Stay tuned and watch our REsearch blog!
Amazing news! Congratulations to Caroline, Olly and everyone at Indigo Pearl!
Honoured to be named Best Small Company winners at the @GamesInsudtry.biz awards 💜
Psycle Interactive retweeted
Heading to #LABScon to present our latest REsearch with @pagabuc on #PKfail new data points and discoveries!
🚀 Just one week until @LABScon_io , where @pagabuc and @matrosov unveil our latest research: “PKFAIL: Supply-Chain Failures in Secure Boot Key Management.”
🔬 This research dives into new data insights uncovered since the initial #PKFAIL disclosure, including a brand-new vulnerability affecting servers based on Supermicro hardware.
📻 Stay tuned — next week is packed with exciting announcements from our team!
Psycle Interactive retweeted
🎉 The all-new Binarly Transparency Platform v2.5 introduces Reachability Analysis to help security teams prioritize vulnerabilities by analyzing the potential reach and impact of exploitable code paths. A game-changer in software security!
binarly.io/blog/introducing-…
Psycle Interactive retweeted
We’re thrilled to announce the launch of our new products at #BHUSA! Today, we introduced the #BinaryRiskHunt free scanner for UEFI FW, which can detect #PKfail, #LogoFAIL, and numerous other vulnerabilities.
Get your SBOM with transitive dependencies!
🔬risk.binarly.io
Psycle Interactive retweeted
🚨New! "PKFail: Untrusted Platform Keys Undermine Secure Boot on UEFI Ecosystem."
#PKfail is a supply-chain issue affecting x86/ARM devices around the globe.
Blog:
binarly.io/blog/pkfail-untru…
Full report:
22222483.fs1.hubspotusercont…
A free scanning tool: pk.fail
Psycle Interactive retweeted
NEW! "Blind Trust and Broken Fixes: The Ongoing Battle with LogoFAIL Vulnerabilities".
6 months have passed since we publicly disclosed #LogoFAIL, a vulnerability impacting image parsers that affects both x86 and ARM-based ecosystems.
Full report: binarly.io/blog/blind-trust-…
Psycle Interactive retweeted
Celebrating 60 years @BESResearch 'an essential resource for election researchers since the 1960s' @ProfJaneGreen @NuffieldCollege @OfficialUoM @caprosser @RoyalHolloway @jon_mellon @PoliSciJack @JamesDavidGriff @perrett_stuart
Psycle Interactive retweeted
Fresh from Binarly REsearch team: We’ve completed an in-depth analysis of the #XZbackdoor, from initialization to the main hook enabling remote access.
Dive into our validated breakdown of techniques and backdoor functionalities, complete with proofs.
github.com/binarly-io/binary…
Psycle Interactive retweeted
NEW! In this blog, we discuss how Binarly's REsearchers dissected the XZ backdoor and created the xz.fail detection tool.
binarly.io/blog/xz-utils-sup…
Binarly are an amazing team. It's been a privilege to work with them over the last two months. Congratulations to @matrosov and the Binarly team!
From day one, we set out on the tough journey to solve the gnarly problems impacting modern software supply chain security. Today I'm thrilled to share that some of the sharpest minds in cyber have validated our approach and joined our oversubscribed seed round. I'm grateful to add @TwoBearCapital, @Blu_Venture,
@CanaanPartners, @Cisco_Invests and @Liquid2V to our team.
binarly.io/blog/software-sup…
Psycle Interactive retweeted
Focusing on equity and access, Cure4Cancer is working to improve outcomes for patients nationwide by bringing together multi-regional stakeholders to accelerate the development of cancer cures. #GlobalCancerMoonshot #WorldCancerDay @AsiaPolicy
youtube.com/watch?v=I85MHFq4…
























