PSW #758 - Ang Cui

<p>Red Balloon Security CEO Ang Cui has spent over a decade looking into the most critical devices supporting our infrastructure. He explains why the insight that launched his company still holds true, and what it will take for security experts, manufacturers and end users to resolve our insecure stasis.</p> <p> </p> <p>Segment Resources:</p> <p><a href= "https://redballoonsecurity.com/">https://redballoonsecurity.com/</a></p> <p><a href="https://ofrak.com/">https://ofrak.com/</a></p> <p><a href= "https://github.com/redballoonsecurity/ofrak">https://github.com/redballoonsecurity/ofrak</a></p> <p><a href= "https://redballoonsecurity.com/def-con-30-badge-fun-with-ofrak/">https://redballoonsecurity.com/def-con-30-badge-fun-with-ofrak/</a></p> <p><a href= "https://www.wired.com/story/ofrak-iot-reverse-engineering-tool/">https://www.wired.com/story/ofrak-iot-reverse-engineering-tool/</a></p> <p><a href= "https://www.bloomberg.com/news/articles/2022-01-11/researchers-show-how-hackers-can-cut-the-lights-with-rogue-code"> https://www.bloomberg.com/news/articles/2022-01-11/researchers-show-how-hackers-can-cut-the-lights-with-rogue-code</a></p> <p> </p> <p>In the Security News: deep access, dell drivers for the win, detecting deep fakes with acoustic tracking, exchanging 0days, I got 99 embedded firmware security problems, executing in SMM, secure boot to the rescue, automation or a crappy pen test, PHP supply chain attacks, pig butchering, fake profiles, & bribing journalists!</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/psw">https://www.securityweekly.com/psw</a> for all the latest episodes!</p> <p>Visit <a href= "https://securityweekly.com/acm">https://securityweekly.com/acm</a> to sign up for a demo or buy our AI Hunter!</p> <p>Follow us on Twitter: <a href= "https://www.twitter.com/securityweekly">https://www.twitter.com/securityweekly</a></p> <p>Like us on Facebook: <a href= "https://www.facebook.com/secweekly">https://www.facebook.com/secweekly</a></p> <p> </p> <p>Show Notes: <a href= "https://secu