Mastodawn

Ghidra is free, extensible, and helpful for reverse engineering firmware, but its learning curve is steep...

In this blog post, Adam Bromiley shares tips and tricks that make firmware reversing less painful, from finding the load address and interrupt vector table, through to defining a proper memory map and making better use of strings, scripts, LLMs, and more.

It's a guide built from real research projects and a lot of hours spent in front of Ghidra’s UI.

📌Read here: https://www.pentestpartners.com/security-blog/taming-the-dragon-reverse-engineering-firmware-with-ghidra/

#ReverseEngineering #FirmwareSecurity #Ghidra #HardwareHacking #CyberSecurity

Offensive Sequence Mar 2

🚨 CRITICAL: CVE-2026-2584 in Ciser CSIP firmware 3.0 – 5.1 enables unauthenticated SQL injection via login interface. Config data at risk — patch not yet released. Restrict access & monitor now. https://radar.offseq.com/threat/cve-2026-2584-cwe-89-improper-neutralization-of-sp-3951e11b #OffSeq #CVE20262584 #SQLi #FirmwareSecurity

TechNadu Feb 19

Texas is taking legal action against TP-Link, alleging firmware vulnerabilities enabled exploitation by China-linked actor Camaro Dragon.

Beyond geopolitics, this case highlights:
• Firmware attack surface risks
• Supply chain governance challenges
• Security disclosure vs. marketing claims
• State-level cyber enforcement expansion

If regulatory scrutiny shifts toward vendor security representations, the industry may face stricter compliance obligations.

Source: https://therecord.media/texas-sues-tp-link-china-allegations

Are hardware vendors prepared for this enforcement era?

Comment with your technical assessment.
Follow Technadu for in-depth threat intelligence reporting.

#Infosec #FirmwareSecurity #ThreatActors #SupplyChainRisk #CyberEnforcement #SecurityResearch #RouterSecurity #CyberPolicy #BlueTeam #CyberDefense

TechNadu Dec 2

Qualcomm has detailed six high-priority vulnerabilities — including a critical secure boot flaw (CVE-2025-47372). Additional issues affect TZ Firmware, HLOS components, DSP, audio, and camera modules.

OEMs are receiving patches and users may need to check manufacturer timelines for deployment.
Follow us for more non-sensationalized security reporting.

Source: https://gbhackers.com/qualcomm-alerts-users-to-critical-flaws/

#Infosec #Qualcomm #SecureBoot #FirmwareSecurity #ThreatIntel #TechNadu #CVEs #DeviceSecurity

TechNadu Nov 28

NVIDIA has released a critical DGX Spark firmware update addressing 14 vulnerabilities - including CVE-2025-33187 (CVSS 9.3), which enables malicious code execution and access to protected SoC regions.

Firmware flaws in AI workstations can impact model integrity, training data, and system stability.

Organizations using DGX Spark should patch immediately.

Source: https://cybersecuritynews.com/nvidia-dgx-spark-vulnerabilities/#google_vignette

What’s your view on firmware security in AI-focused hardware?
Follow us for more analysis.

#infosec #NVIDIA #DGXSpark #CVE #AIsecurity #firmwaresecurity #patchnow #securityupdate

TechNadu Nov 3

The Commerce Department’s proposed ban on TP-Link routers underscores growing scrutiny of supply-chain trust and firmware control.

Agencies found persistent links between the U.S. entity and its Chinese counterpart, citing firmware and infrastructure exposure risks.
While TP-Link denies foreign influence, the case spotlights the intersection of technical risk and geopolitical oversight.

How do you assess supplier integrity in environments dependent on third-party networking hardware?

💬 Add your perspective & follow @technadu for continued threat intelligence coverage.

#Infosec #TPLink #SupplyChainSecurity #FirmwareSecurity #CyberRisk #NationalSecurity #CyberDefense #TechNews #SecurityCommunity #CyberIntel

Lenin alevski 🕵️💻Oct 20

Is your IoT firmware secure? 🛠️🔒

EMBA is a powerful open-source firmware security analyzer. It handles *firmware extraction*, *static analysis*, *emulation*, and builds SBOMs—all while scanning for outdated binaries, hardcoded creds, and more. Outputs an actionable web report for devs & testers.

#FirmwareSecurity #IoTSecurity

🔗 Project link on #GitHub 👉 https://github.com/e-m-b-a/emba

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

— ✨
🔐 P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 💻🏴‍☠️

TechNadu Oct 6

“Exploitability isn’t one thing; it’s multiple layers that work together.” — Michael Scott, CTO @NetRise_io
Scott breaks down how firmware analysis, SBOM dashboards, and AI triage expose real exploitability—not just theoretical risk.

Full interview:
https://www.technadu.com/how-firmware-risks-are-exposed-through-sbom-mapping-exploitability-checks-and-smarter-ai-powered-defenses/610106/

#FirmwareSecurity #AI #SBOM #SupplyChainRisk

TechNadu Aug 14, 2025

🚨 BadCam Attack — Remote BadUSB for Linux Webcams
Eclypsium research shows how attackers can reflash Linux-based webcams to persistently re-infect hosts, even after OS reinstalls.

Tested on Lenovo 510 FHD & Performance FHD Web — flaw tracked as CVE-2025-4371, fixed in FW 4.8.0. Linked kernel flaw CVE-2024-53104 exploited in the wild.

💬 Are your USB peripherals part of your patching & monitoring strategy?

#CyberSecurity #BadUSB #FirmwareSecurity #LinuxSecurity #PersistenceThreat #Lenovo