Tons of research has been already presented about problems in UEFI firmware ecosystem and how relatively easy deliver and install implant/rootkit. But in this blog post, I want to focus on classification of vulnerabilities and attack vectors which…
The Qualcomm Vulnerability Rewards Program just completed its second year, and to mark the occasion we are sharing some insights into the program, how it has evolved, and how you might play a part. If you are not familiar, a vulnerability reward…
After spending the better part of a weekend writing a specialized Windows driver for the purposes of allowing me to communicate with the Hyper-V hypervisor, as well as the Secure Kernel, from user-mode, I realized that there was a dearth of concise…
We open-sourced a fault injection tool, KRF, that uses kernel-space syscall interception. You can use it today to find faulty assumptions (and resultant bugs) in your programs. Check it out! This post covers intercepting system calls from within…
