Chris Garland

Microsoft Threat Intelligence has issued new reporting about tactics being used by Silk Typhoon (also called APT27 or HAFNIUM by some researchers). Silk Typhoon is a Chinese espionage group, observed targeting Microsoft Exchange Servers in 2021, now reported to be targeting common IT solutions for initial access. Microsoft reports that Silk Typhoon exploits unpatched applications, The post Silk Typhoon Targeting IT Supply Chains and Network Devices, Microsoft Reports appeared first on Eclypsium

Join Paul Asadoorian for an eye-opening webinar exploring the meteoric growth of affordable hardware hacking devices, from the FlipperZero to ESP32-based platforms, and their implications for cybersecurity. This session is a must for security professionals, researchers, IT decision-makers, and anyone concerned about balancing innovation with security in the age of cheap, accessible hardware hacking tools. The post Hardware Hacking: Tools, Tips & Tricks for Total Domination appeared first on Eclypsium

Remotely Exploitable AMI Vulnerabilities Introduce Risk In Cloud Infrastructure Supply Chain A continuation of BMC&C research and findings, exploring exploit chaining and post-exploit impact scenarios for data centers worldwide. BMC&C Vulnerabilities – Part 3 The Eclypsium research team has discovered a previously unknown remotely exploitable vulnerability in AMI’s MegaRAC software that allows attackers to bypass The post BMC&C: Redfish Alert 3 appeared first on Eclypsium

In this episode, Paul Asadoorian, Vlad Babkin, and Chase Snyder delve into the latest vulnerability disclosures related to Baseboard Management Controllers (BMCs), specifically focusing on AMI Megarac and Redfish. They discuss the nature of the vulnerabilities, the discovery process, and the potential impacts of a BMC compromise. The conversation highlights the importance of understanding BMCs The post BTS #47 - BMC&C Part 3 appeared first on Eclypsium

Global Partner Program empowers partners to deliver top-tier supply chain security solutions to enterprise customers

Backdoored Juniper networking devices are at the center of two major cybersecurity stories that highlight the ongoing vulnerability and active targeting of network infrastructure by cyber adversaries. J-Magic and TINYSHELL The first story broke in January 2025, when researchers at Black Lotus Labs, a research arm of the ISP Lumen Technologies, revealed information about an The post Juniper Routers, Network Devices Targeted with Custom Backdoors appeared first on Eclypsium

The post Eclypsium @ RSAC 2025 appeared first on Eclypsium

The post 5 Reasons to Secure Firmware in Financial Services Organizations appeared first on Eclypsium

A leading global telecommunications company with large integrated satellite and terrestrial networks provides diverse services to telecommunications operators, enterprises, media companies, and government entities. They chose Eclypsium to provide better visibility and vulnerability management on thousands of Cisco and Juniper network devices critical to their global operations. Within 1-2 months, Eclypsium was able to deliver The post Global Telecommunications Company Secures Critical Networks appeared first on Eclypsium

In this episode, Paul and Chase delve into the world of hardware hacking, focusing on devices like the Flipper Zero and ESP32. They discuss the various applications of these tools, their impact on awareness in the hacking community, and the security implications surrounding their use. The conversation also touches on vulnerabilities in hotel security systems, The post BTS #48 - Hardware Hacking Tips & Tricks appeared first on Eclypsium