AMD Acknowledges Newly Disclosed Flaws In Its Processors — Patches Coming Soon

AMD has finally acknowledged 13 critical vulnerabilities, and exploitable backdoors in its Ryzen and EPYC processors disclosed earlier this month by Israel-based CTS Labs and promised to roll out firmware patches for millions of affected devices ‘in th… Continue reading AMD Acknowledges Newly Disclosed Flaws In Its Processors — Patches Coming Soon

Dangerous Intel Chip Flaw Patches Becoming Available

Some computer manufacturers have started releasing patches for eight serious vulnerabilities in Intel processors or they have outlined firmware update plans for vulnerable models. Acer, Dell, Fujitsu, Hewlett Packard Enterprise (HPE), Lenovo, Panasonic… Continue reading Dangerous Intel Chip Flaw Patches Becoming Available

HP Patches High-Risk Vulnerability in Business Printers

HP released security firmware updates this week for dozens of printers, including enterprise models, to fix a high-risk vulnerability that could allow attackers to compromise the devices. The vulnerability, tracked as CVE-2017-2750, stems from a failur… Continue reading HP Patches High-Risk Vulnerability in Business Printers

Intel Warns of Serious Processor Flaws

Intel has released firmware updates for many of its processors to fix eight high-risk flaws that can put systems at risk of complete compromise. The flaws are located in low-level technologies found in the Intel Management Engine (ME), the Intel Truste… Continue reading Intel Warns of Serious Processor Flaws

Faulty Firmware Auto-Update Breaks Hundreds of ‘Smart Locks’

More features, more problems!

Today, we are living in a digital age that is creating a digital headache for people by connecting every other unnecessary home appliance to the Internet.

Last week, nearly hundreds of Internet-connected locks became ino… Continue reading Faulty Firmware Auto-Update Breaks Hundreds of ‘Smart Locks’

Chris Conlon: Device Security 101

We all wring our hands over the security (or lack thereof!) of our myriad smart devices. If you haven’t had your home network hacked through your toaster, or baby cam, you’re missing out on the zeitgeist. But it doesn’t have to be this way — smart devices can be designed with security in mind, and [Chris Conlon] came to Pasadena to give us a talk on the basics.

He starts off the talk with three broad conceptual realms of data security: data in transit, data at rest on the device, and the firmware and how it’s updated. A common thread …read more

Continue reading Chris Conlon: Device Security 101

Moxa Won’t Patch Publicly Disclosed Flaws Until August

A number of publicly disclosed vulnerabilities in Moxa networking gear won’t be patched until August, if at all, according to ICS-CERT. Continue reading Moxa Won’t Patch Publicly Disclosed Flaws Until August