Uncovering Firmware Risks: From Y2K to Modern Malware - BTS #73

About this episode

The episode explores the evolution of firmware security and the risks associated with supply chain vulnerabilities.

In this episode of Below the Surface, hosts Paul Asadoorian, Chase Snyder, and guest Brian Richardson explore the evolution of firmware security, the risks of supply chain vulnerabilities, and the latest threats targeting network edge devices like Cisco ASA and FTD. They discuss historical malware like the Chernobyl virus, modern malware campaigns such as Firestarter, and the challenges of securing complex network infrastructure in a rapidly evolving threat landscape. Links: https://www.linkedin.com/news/story/white-house-pushes-back-on-anthropics-mythos-expansion-8741242/ https://www.tomshardware.com/tech-industry/cyber-security/the-chernobyl-virus-turned-27-today-and-it-could-brick-your-pc-in-ways-modern-malware-cant https://blog.talosintelligence.com/uat-4356-firestarter/ Chapters 00:00 Introduction to Below the Surface 02:20 Brian's Transition to Eclipseum 03:50 The Y2K Experience and Early Virus Detection 06:31 The CIH Virus and Its Impact 10:12 BIOS Security and Vulnerabilities 14:10 The Importance of Firmware Lockdown 18:09 Modern Threats and UEFI Attacks 22:13 Targeted Malware and Ransomware Risks 25:21 Creative Concepts in Cybersecurity 26:20 Emerging Threats…

People in this episode

Hosts: Paul Asadoorian, Chase Snyder

Guest: Brian Richardson

Topics covered

• firmware security
• supply chain vulnerabilities
• network edge devices
• malware evolution
• cybersecurity challenges

Keywords

• firmware risks
• malware
• Y2K
• network security
• supply chain

Mentioned in this episode

Organizations: Eclypsium

Products: Cisco ASA, FTD

Books & works: Chernobyl virus, Firestarter

More episodes of Below the Surface (Audio) - The Supply Chain Security Podcast

• AI-Powered Firmware Hacking: The Future of Vulnerability Discovery - BTS #72 · April 17, 2026 · 59 min
• What Makes a Device a Router? - BTS #71 · April 7, 2026 · 1h 2m
• How Cheap KVMs Could Be Your Network's Weak Link - BTS #70 · March 25, 2026 · 1h 3m
• Navigating Network Edge Vulnerabilities - BTS #69 · March 5, 2026 · 1h 4m
• Attacking Power Grids - BTS #68 · February 11, 2026 · 1h 2m
• BIOS Password Cracking, Secure Boot, and Stackwarp - BTS #67 · January 27, 2026 · 1h 0m