Learn

In this interview, Alex Matrosov of Binarly sheds light on the BlackTech attack and firmware security in general. He explores the evolution and mechanics of such attacks, the challenges in firmware security, and its significance in enterprise setups. Essential viewing for those keen on cybersecurity and firmware threats.

Binarly CEO and Head of Research Alex Matrosov shares thoughts on newly discovered high-risk vulnerabilities in Supermicro Baseboard Management Controller (BMC) firmware and the grave risks to enterprise systems worldwide.

Binarly founder and CEO Alex Matrosov discusses the importance of cryptographic key management for firmware and device security. We explore cases of compromised device security, introduce Binarly's preventive technology, and discuss strategies for maintaining the integrity of cryptographic practices. Learn how mishandling these keys can lead to large-scale breaches affecting multiple products, and see how Binarly’s groundbreaking technology can assist in safeguarding against such threats.

Binarly CEO Alex Matrosov discusses the LogoFAIL set of vulnerabilities that allow attackers to store malicious logo images either on the EFI System Partition (ESP) or inside unsigned sections of a firmware update. When these images are parsed during boot, the vulnerability can be triggered and an attacker-controlled payload can arbitrarily be executed to hijack the execution flow and bypass security features like Secure Boot, including hardware-based Verified Boot mechanisms (like Intel Boot Guard, AMD Hardware-Validated Boot or ARM TrustZone-based Secure Boot).

Binarly CEO Alex Matrosov recaps a busy and successful 2023, celebrates the Binarly Transparency Platform product launch, and looks to the future with confidence.

Two Bear Capital invests in founders with breakthrough ideas so it is no surprise they saw something new and exciting with Alex Matrosov, CEO & Founder of Binarly - one of Two Bear Capital's newest portfolio companies. In this video, Mike Goguen, Founder and Managing Partner and Cris Neckar, Venture Partner describe why Two Bear Capital led Binarly's $10.5M seed round and how the investment will catalyze Binarly's cutting edge approach to modern software supply chain security.

We're proud to announce the close of our $10.5M seed funding round led by Two Bear Capital , with participation from Blu Ventures, Canaan Partners, Cisco Investments, and Liquid 2 Ventures. This funding is the next milestone in Binarly's mission to help solve the gnarly problems in software supply chain security.

Lighttpd impacts BMCs manufactured by American Megatrends and used in Intel and Lenovo products which are no longer under support. Learn more about how this vulnerability is still being perpetuated in our software supply chain.

6 Months ago the Binarly REsearch team discovered and disclosed LogoFAIL - a critical and far reaching vulnerability. Six months have passed since disclosure. How did the industry do with updates and fixes?

The Binarly REsearch team discovered that hundreds of products use a test Platform Key generated by American Megatrends International (AMI), and the private component of one Platform Key was leaked, impacting millions of devices worldwide.

The Binarly REsearch Team investigates usage of untrusted Secure Boot keys in the UEFI firmware ecosystem and shows how a leaked Platform Key can be used to bypass Secure Boot on Linux.

The Binarly REsearch Team investigates usage of untrusted Secure Boot keys in the UEFI firmware ecosystem and shows how a leaked Platform Key can be used to bypass Secure Boot on Windows 11.

Cris Neckar, Partner at Two Bear Capital, highlights a critical blind spot in our understanding of the ingredients of modern software supply chains and calls attention to a risky world where everyday items like cars contain multiple embedded computers running opaque software systems.

AI isn't just for the attackers. When applied correctly, AI helps defenders scale their teams and allocate resources to solve real problems, not just triage alerts.

As part of a #TechWeek panel hosted by Two Bear Capital, Ryan Naraine of Security Conversations poses the question "Why is the complexity of modern software creating huge gaps in the software supply chain?" to Binarly Founder & CEO, Alex Matrosov.

Binarly Chief Executive Officer Alex Matrosov introduces the latest advancements in the Binarly Transparency Platform. This version update brings significant improvements to performance, usability, and risk visibility, including a groundbreaking 5x increase in platform efficiency and powerful new tools for cryptographic materials analysis. Alex discusses how Binarly’s innovations help organizations transition to a post-quantum cryptography landscape, enhance Linux kernel hardening detection, and empower security teams with actionable insights into software supply chain risks. Learn how Binarly is redefining secure-by-design practices for embedded systems, Docker containers, and beyond.

Binary Risk Hunt expands on the successful FwHunt.RUN project and includes first-of-its-kind technology to identify known vulnerabilities and firmware implants, map dependencies (including transitive dependencies), and to generate comprehensive SBOM (Software Bill Of Materials). Key features of Binary Risk Hunt v1.0 include Detection of known firmware vulnerabilities and malicious implants Identification of leaked cryptographic keys Dependency mapping, including transitive dependencies Generation of Software Bills of Materials (SBOM) API access for large-scale detection

Today Binarly is releasing several innovative updates to their “secure by design” firmware and software supply chain solution. Binarly’s Transparency Platform enables security teams and manufacturers to catch: Vulnerabilities in firmware, containers, Linux distributions Vulnerabilities with CVEs Entire new classes of vulnerabilities Insecure coding practices Common cryptographic mistakes and key leaks Issues introduced during build time - Licensing issues

In the latest version of the Binarly Transparency Platform, Reachability Analysis, Custom Rules and Cryptographic Management (CBOM) take center stage.

Official launch video for the Binarly Transparency Platform