Post

Key takeaways include: - Reused cryptographic keys across multiple device vendors, exposing billions of devices to risk - Private key leaks and poor cryptographic practices that have persisted for years - The impact on critical systems like ATMs, voting machines, and enterprise servers

s1.aiLABScon24 Replay | PKfail: Supply-Chain Failures in Secure Boot Key ManagementBinarly’s Alex Matrosov and Fabio Pagani present PKfail, a firmware supply-chain security issue affecting major device vendors and hundreds of device models.