Displaying items by tag: Eclypsium

ANNOUNCEMENT: The Guide is first in the industry to offer supply chain risk intelligence for IT infrastructure, including endpoints, servers, network devices, and cloud infrastructure products

Researchers at security firm Eclypsium have discovered a means whereby malicious code can be inserted during the boot-up process on a device running Linux, due to a flaw in the bootloader used: the grand unified bootloader otherwise known as GRUB, now in its second version.

Research by security firm Eclypsium shows that vacated cloud servers are not properly wiped by hosting providers and may be used as an intrusion channel by bad actors.

Firmware and hardware security firm Eclypsium (recently funded by Andreessen Horowitz and others) has released new findings, demonstrating that BMC (baseboard management controllers) vulnerabilities can actually be exploited to "brick" servers, rendering entire data centres and cloud applications completely useless.