Eclypsium has discovered new vulnerabilities in a particular Unified Extensible Firmware Interface (UEFI) implementation from HP. This is the first vulnerability to be discovered automatically by our Automata binary analysis system, which replicates the tooling and techniques used by human security researchers. In addition to this vulnerability, we’ve discovered several other vulnerabilities in IT infrastructure […]

The post Automata in Action: New Vulnerabilities Discovered in HP UEFI appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post Automata in Action: New Vulnerabilities Discovered in HP UEFI appeared first on Security Boulevard.

Bob Martin comes on the show to discuss systems of trust, supply chain security and more! Show Notes

The post BTS #30 - Systems Of Trust – Robert Martin appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post BTS #30 – Systems Of Trust – Robert Martin appeared first on Security Boulevard.

The post Using Open-Souce and Built-In Tools for Supply Chain Validation appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post Using Open-Souce and Built-In Tools for Supply Chain Validation appeared first on Security Boulevard.

Jason joins us to discuss the current enterprise landscape for defending against supply chain attacks, remediating firmware issues, and the current challenges with patch management. Show Notes

The post BTS #29 - Supply Chains, Firmware, And Patching - Jason Kikta appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post BTS #29 – Supply Chains, Firmware, And Patching – Jason Kikta appeared first on Security Boulevard.

Our ongoing research has identified remotely exploitable vulnerabilities in F5’s Next Central Manager that can give attackers full administrative control of the device, and subsequently allow attackers to create accounts on any F5 assets managed by the Next Central Manager. These attacker-controlled accounts would not be visible from the Next Central Manager itself, enabling ongoing […]

The post Big Vulnerabilities in Next-Gen BIG-IP appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post Big Vulnerabilities in Next-Gen BIG-IP appeared first on Security Boulevard.

Eclypsium is extending its digital supply chain security to cover GenAI hardware and training models SAN FRANCISCO – RSA Conference – May 7, 2024 – Eclypsium, the supply chain security company protecting critical hardware, firmware, and software, today announced new GenAI assessment capabilities for its Supply Chain Security Platform. The new capabilities help secure the […]

The post Eclypsium Supply Chain Security Platform Protects GenAI Infrastructure with Addition of Hardware and Training Model Assessment Capabilities appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post Eclypsium Supply Chain Security Platform Protects GenAI Infrastructure with Addition of Hardware and Training Model Assessment Capabilities appeared first on Security Boulevard.

Today, at RSA Conference 2024, we’re announcing new capabilities to help secure the fundamental layers of the GenAI tech stack. First, we’re adding continuous monitoring support for NVIDIA hardware used in training, fine-tuning, and leveraging GenAI models, such as the NVIDIA H100 Tensor Core GPU. Second, we have added integrity verification for GenAI foundation models […]

The post Securing Supply Chains for GenAI Hardware and Models appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post Securing Supply Chains for GenAI Hardware and Models appeared first on Security Boulevard.

Platform named Market Leader for Software Supply Chain Security SAN FRANCISCO – RSA Conference – May 6, 2024 – Eclypsium, the supply chain security company protecting critical hardware, firmware, and software, is pleased to announce that it has been awarded the  Global InfoSec award for Market Leader Software Supply Chain Security by Cyber Defense Magazine […]

The post Eclypsium Supply Chain Security Platform Wins Global InfoSec Award appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post Eclypsium Supply Chain Security Platform Wins Global InfoSec Award appeared first on Security Boulevard.