[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-193":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-193","SP 800-193","SP 800-193: Platform Firmware Resiliency Guidelines",23,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidelines for protecting platform firmware and critical data against unauthorised change, detecting corruption, and recovering to a known good state. They apply to firmware in servers, clients and components, extending earlier BIOS protection guidance.\n\n**In practice.** Organisations favour hardware with authenticated firmware update mechanisms, a root of trust and secure boot, and enable these features. Firmware is included in vulnerability and patch management, and integrity is checked where tools allow. Evidence includes procurement requirements, configuration baselines with secure boot enabled and firmware update records.\n\n**Common gaps.** Typical gaps are firmware left outside patching, features available but not enabled, and no recovery path if firmware is corrupted. Recovery mechanisms are also rarely tested, so organisations do not know whether a corrupted device could be restored without replacement.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"hardware-implants-in-crypto-wallets-expose-supply-chain-risks","Hardware Implants in Crypto Wallets Expose Supply-Chain Risks","2026-10-14T18:20:46.881+00:00",{"slug":23,"title":24,"published_at":25},"hardware-implants-in-crypto-wallets-highlight-critical-supply-chain-risk","Hardware Implants in Crypto Wallets Highlight Critical Supply Chain Risk","2026-10-12T18:20:21.423+00:00",{"slug":27,"title":28,"published_at":29},"ddrop-hardware-attack-bypasses-confidential-computing-protections-in-intel-tdx-and-amd-sev-snp","DDRop Hardware Attack Bypasses Confidential Computing Protections in Intel TDX and AMD SEV-SNP","2026-09-14T18:21:04.604+00:00",{"slug":31,"title":32,"published_at":33},"car-head-unit-malware-hijacks-legitimate-update-mechanism","Car Head Unit Malware Hijacks Legitimate Update Mechanism","2026-08-26T20:22:04.257+00:00",{"slug":35,"title":36,"published_at":37},"hard-coded-credentials-and-buffer-overflows-put-bendix-brake-ecus-at-risk","Hard-Coded Credentials and Buffer Overflows Put Bendix Brake ECUs at Risk","2026-08-25T20:21:38.115+00:00",{"slug":39,"title":40,"published_at":41},"first-car-head-unit-malware-expands-badbox-botnet-to-in-vehicle-infotainment-systems","First Car Head Unit Malware Expands BadBox Botnet to In-Vehicle Infotainment Systems","2026-08-25T12:20:21.356+00:00",{"slug":43,"title":44,"published_at":45},"supply-chain-attack-hijacks-android-car-head-units-via-trojanized-update-app","Supply-Chain Attack Hijacks Android Car Head Units via Trojanized Update App","2026-08-22T16:20:17.512+00:00",{"slug":47,"title":48,"published_at":49},"android-car-head-unit-malware-hijacks-legitimate-updaters-for-ad-fraud-and-proxy-botnet","Android Car Head Unit Malware Hijacks Legitimate Updaters for Ad Fraud and Proxy Botnet","2026-08-21T18:21:08.602+00:00",{"slug":51,"title":52,"published_at":53},"android-malware-hijacks-car-head-units-via-fake-software-updates","Android Malware Hijacks Car Head Units via Fake Software Updates","2026-08-21T10:22:16.667+00:00",{"slug":55,"title":56,"published_at":57},"unisoc-modem-exploit-chain-grants-full-android-kernel-access-via-volte-call","Unisoc Modem Exploit Chain Grants Full Android Kernel Access via VoLTE Call","2026-08-17T14:21:29.936+00:00",{"slug":59,"title":60,"published_at":61},"hidden-security-fixes-in-safety-recalls-expose-critical-infrastructure-risks","Hidden Security Fixes in Safety Recalls Expose Critical Infrastructure Risks","2026-08-07T10:20:18.861+00:00",{"slug":63,"title":64,"published_at":65},"hardcoded-bluetooth-key-exposes-automotive-anti-theft-systems-to-remote-attack","Hardcoded Bluetooth Key Exposes Automotive Anti-Theft Systems to Remote Attack","2026-08-04T16:22:50.484+00:00",[67,72,77,82,86,91],{"slug":68,"name":69,"problem":70,"stories":71},"patch-management","Automated patch management","Known holes get closed in days, not months.",16,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",9,{"slug":78,"name":79,"problem":80,"stories":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",6,{"slug":83,"name":84,"problem":85,"stories":81},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"slug":87,"name":88,"problem":89,"stories":90},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",5,{"slug":92,"name":93,"problem":94,"stories":95},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",4,[97,103,108,113,118,123,128,132],{"family":98,"item":99,"code":100,"title":101,"together":102},"cis","7","Control 7","Continuous Vulnerability Management",19,{"family":98,"item":104,"code":105,"title":106,"together":107},"2","Control 2","Inventory and Control of Software Assets",13,{"family":98,"item":109,"code":110,"title":111,"together":112},"16","Control 16","Application Software Security",12,{"family":5,"item":114,"code":115,"title":116,"together":117},"800-161","SP 800-161","SP 800-161 Rev. 1: Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations",10,{"family":119,"item":120,"code":121,"title":122,"together":76},"nist-800-53","sa-12","SA-12","Supply Chain Protection",{"family":124,"item":125,"code":126,"title":126,"together":127},"itil","overview","ITIL",8,{"family":98,"item":129,"code":130,"title":131,"together":81},"4","Control 4","Secure Configuration of Enterprise Assets and Software",{"family":119,"item":133,"code":134,"title":135,"together":81},"si-2","SI-2","Flaw Remediation"]