Collaborate Disseminate
In a tour-de-force response to the reported CTS-Labs exploits (dubbed Masterkey, Ryzenfall, Chimera and Fallout) from AMD, the company has clearly defined the issues and the mitigation plan (comprised of both patches and BIOS updates). All with no pe… Continue reading AMD Has Confirmed Flaws Will Be Patched, No Performance Hit
Ian Cutress – writing at eponymous AnandTech – expertly reported AMD Ryzen security flaws yesterday, via and announcement by security research firm CTS-Labs. While this appears to be bad news, let’s leave the exact fix criteria to AMD, of which, has … Continue reading Kerfuffle of Ryzen
Permalink
The post BSides Leeds, Andrew Tierney’s ‘Bypassing CRP on Microcontrollers’ appeared first on Security Boulevard.
Continue reading BSides Leeds, Andrew Tierney’s ‘Bypassing CRP on Microcontrollers’
via Zaid Shoorbajee – reporting for Cyberscoop, comes a story of security entropy, this time in medical imaging device system patching and an esteemed University’s research targeting those systems. In this case, a research paper from Israel’s Ben-Guri… Continue reading BGU Security Researchers Urge Physicians to Patch Their Systems
Permalink
The post BlueHat IL 2018, Gunter Ollmann’s’ ‘Extracting Secrets from Silicon: A New Generation of Bug Hunting’ appeared first on Security Boulevard.
Continue reading BlueHat IL 2018, Gunter Ollmann’s’ ‘Extracting Secrets from Silicon: A New Generation of Bug Hunting’
Permalink
The post BlueHat IL 2018, David Weston’s ‘Windows: Hardening with Hardware’ appeared first on Security Boulevard.
Continue reading BlueHat IL 2018, David Weston’s ‘Windows: Hardening with Hardware’
The stupidity just won’t stop from the executives at Intel; Indeed… H/T
Permalink
The post Intel Warns Beijing of Spectre/Meltdown, Forgets to Call Washington, DC appeared first on Security Boulevard.
Continue reading Intel Warns Beijing of Spectre/Meltdown, Forgets to Call Washington, DC
Reportedly, Harry Sintonen, empolyed at F-Secure as a security researcher, discovered during the course of his labors – a flaw in Intel’s Active Management Technology (AMT) firmware. Ooops.
As is typical of Intel Corporation (Nasdaq: INTC) the firm is… Continue reading Another Flawed Bit of Intel Corp Nonsense, The Active Management Technology Vector
Martin Brinkmann writing at his superaltive GHacks site, provides a comprehensive tutorial for Linux targeting Meltdown and Spectre vulnerability; and as is typical for Mr. Brinkmann, he has the script stting at GitHub. Very Nice, thanks Martin!
Perm… Continue reading Linux: Check for Meltdown/Spectre Vulnerability
Via the decaffinated observations of Nitrozac and Snaggy at The Joy of Tech®.
Permalink
The post The Joy of Tech®’s ‘What The Hell Happened At Intel’ appeared first on Security Boulevard.
Continue reading The Joy of Tech®’s ‘What The Hell Happened At Intel’