Cybersecurity Risks to IoT and Software Supply Chains

Key Takeaways

Blind spots in IoT/embedded devices are the real crisis:
The episode argues that organizations are “totally blind” to the vulnerabilities inside IoT/ICS/medical/vehicle/telecom devices because you can’t deploy normal endpoint tools (agents/EDR) and traditional scanning doesn’t fit these platforms.
Firmware decomposition + SBOMs make risk measurable:
NetRise’s approach is to automatically unpack firmware, identify software components, generate an SBOM, map vulnerabilities/exploitability, and surface supply-chain artefacts like keys, certs, credentials, and misconfigurations.
SBOM adoption is shifting from “nice idea” to necessity:
They highlight how enterprises often can’t even answer whether a vulnerable component exists across thousands of device vendors—and many manufacturers don’t know either.