ReVault! When your SoC turns against you… deep dive edition

This technical deep-dive documents discovery and exploitation of multiple vulnerabilities in Dell ControlVault3 firmware and host drivers (Broadcom BCM5820X). The researchers reverse-engineered the bootloader and firmware decryption, reported several CVEs, demonstrated arbitrary code execution in firmware, showed how to extract device keys and install malicious firmware implants that can bypass Windows Hello and escalate to SYSTEM on Windows, and discussed detection and mitigation options.