Explore the critical vulnerabilities in enterprise device firmware and their impact on the global IT supply chain in this 41-minute Black Hat conference talk. Delve into new research that uncovers significant security risks in highly privileged areas of computing, stemming from a ransomware group investigation and culminating in a coordinated disclosure effort. Examine the often-overlooked threats posed by firmware controlling mission-critical systems, the challenges of patching, and the potential consequences for the computing industry. Gain insights into the broader context of supply chain security, including recent high-profile attacks, geopolitical tensions, and the re-balkanization of technology design and production.