Ravi Sir's Cyber Security Cards › Revision Cards
Firmware, Updates and Supply-Chain Hygiene
Firmware, Updates and Supply-Chain Hygiene Keeping IoT/OT device firmware updated, and trusting only genuine updates (supply-chain hygiene). Stuxnet (2010) was malware that damaged industrial centrifuges in Iran. It proved software can cause physical harm. Old firmware has known bugs. Update from th
Read card text
What this card says
What it is
Keeping IoT/OT device firmware updated, and trusting only genuine updates (supply-chain hygiene).
Real incident
Stuxnet (2010) was malware that damaged industrial centrifuges in Iran.
It proved software can cause physical harm.
Why it matters for security
Old firmware has known bugs.
Update from the official source only, and check signatures, so a poisoned update can’t get in.
| Red team (attacker) does | Blue team (defender)… |
|---|---|
| Tricks staff into unsigned firmware USB | Signed updates only; write-protect where possible; train |
| Abuses old CVE on abandoned camera OS | Replace or isolate EOL devices; VLAN + egress deny |
| Compromises vendor update channel (SUNBURST-class lesson) | Outbound allow-list; monitor admin suites; staged rollouts |
Learn more in the lesson: 43.7 Firmware, Updates and Supply-Chain Hygiene