Supply Chain Attacks
BMC firmware and the supply chain you forgot you had
Baseboard management controllers run their own operating system below your hypervisor, ship as binary blobs from vendors like AMI and Insyde, and almost never appear in an SBOM. The MegaRAC incidents made that gap impossible to ignore.
May 12, 20268 min read