Blog

Get insights on Eclypsium’s unique approach to digital supply chain security, infrastructure code security, the latest in vulnerability risk management, and industry trend developments. 
Free Rootkit ticket graphic
Blog, RESEARCH

Everyone Gets a Rootkit

Learn more
Blog

From 33% to 69% …. Does it Matter?

Learn more
Zero Trust is a critical strategy for defending our ever-growing digital attack surfaces. But Zero Trust Architecture is incomplete without device firmware and hardware verification. While adding context-aware checks on user activities does help, it cannot account for the many functions that occur inside a device, below the operating system. Three simple checks on device integrity can pave the way in this regard. Here are some examples: Add device vulnerability and firmware patch level risk to network access control. Access from an at-risk device has a long tail of impact. Once data is processed by the device, firmware attacks that happen later may bypass controls like encryption or security software that might have otherwise protected critical resources. Before enabling a device to affect mission-critical assets, check for vulnerabilities and updates. Extend context-aware access control to include device behaviors. Just like access patterns can reveal risky user activity, devices have common behavior profiles, and anomalies can reveal low-level tampering or installation of malicious firmware. Inventory components inside a device in order to enable revocation based on component properties if needed. The ability to revoke access to online sessions or offline data should extend to the device itself. If future events reveal backdoors or serious supply chain concerns, a component level inventory will help quantify exposure and enable quick and decisive action if it becomes necessary. A simple Eclypsium scan collects the information needed for these actions and more. Connect with us to discuss what might be appropriate for your environment
Blog

Three Steps to Complete Your Zero Trust Architecture

Learn more
Eclypsium Detects Severe Vulns in Accellion FTA Devices
Blog, RESEARCH

Eclypsium Detects Severe Vulns in Accellion FTA Devices

Learn more
NIST Kicks the Can Feature Image
Blog

NIST Kicks the Can: Why We Need to Address Firmware Security Now

Learn more
Bios Disconnect Featured Image
Blog, RESEARCH

Eclypsium Discovers Multiple Vulnerabilities Affecting 129 Dell Models via Dell Remote OS Recovery and Firmware Update Capabilities

Learn more
Feature Image You Can't Unsee the Rabbit
Blog

You Can’t Unsee the Rabbit: Perspectives on the 2021 Cybersecurity Executive Order

Learn more
Network Unmanaged Devices Feature Image
Blog

Extending Visibility and Security to Network and Unmanaged Devices

Learn more
What to ask when auditing firmware security compliance
Blog

What to Ask When Auditing Firmware Security

Learn more
Boothole How It Started How It's Going
Blog, RESEARCH

BootHole: How It Started, How It’s Going

Learn more
A Secure Supply Chain Requires Independent Visibility Into Firmware Feature Image
Blog

A Secure Supply Chain Requires Independent Visibility Into Firmware

Learn more
In the Shadow of Sunburst: Hunting for Firmware Persistence in the Context of Supply Chain Attack IR
Blog, RESEARCH

In the Shadow of Sunburst: Hunting for Firmware Persistence in the Context of Supply Chain Attack IR

Learn more
© Eclypsium, Inc.