Storm Watch | Cyber Insights | Supply Chain Storms, Firmware Flurries, and Big (Tech) Trouble In Little China
Summary: This episode of GreyNoise's Storm Watch podcast features a discussion with Nate Warfield of Eclypsium on supply chain and firmware safety, including Eclypsium's analysis of CISA's KEV data. The episode also covers recent sanctions on APT31 hackers, China's expanded "Work Secrets" Law, China's attacks on British MPs, the U.S. versus TikTok saga, and tools including VulnCheck KEV and Community Extended KEV plus NVD APIs.
Why it matters: The segment ties firmware and supply chain exposure to CISA's Known Exploited Vulnerabilities catalog, the same list that sets patching priorities for federal agencies and, by extension, the vendors they buy from. Sanctions on APT31 and China's expanded "Work Secrets" Law are a reminder that the legal and geopolitical ground under threat intelligence is shifting alongside the technical one.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026