OpenSSH Now Encrypts Secret Keys in Memory Against Side-Channel Attacks

In recent years, several groups of cybersecurity researchers have disclosed dozens of memory side-channel vulnerabilities in modern processors and DRAMs, like Rowhammer, RAMBleed, Spectre, and Meltdown.

Have you ever noticed they all had at least one … Continue reading OpenSSH Now Encrypts Secret Keys in Memory Against Side-Channel Attacks

Qualcomm Critical Flaw Exposes Private Keys For Android Devices

A side-channel attack in Qualcomm technology, which is used by most modern Android devices, could allow an attacker to snatch private keys. Continue reading Qualcomm Critical Flaw Exposes Private Keys For Android Devices

Stealing DNA By Phone

Data exfiltration via side channel attacks can be a fascinating topic. It is easy to forget that there are so many different ways that electronic devices affect the physical world other than their intended purpose. And creative security researchers like to play around with these side-effects for ‘fun and profit’. …read more

Continue reading Stealing DNA By Phone

New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data

A team of security researchers has discovered another serious side-channel vulnerability in Intel CPUs that could allow an attacker to sniff out sensitive protected data, like passwords and cryptographic keys, from other processes running in the same C… Continue reading New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data

Synesthesia Attack Allows Hackers To Steal Data Via Screen Noise

The security community has reported that a new malicious tactic has been developed called the Synesthesia Side Channel Attack. The available information shows that inaudible acoustic signals can be deciphered into revealing sensitive user content. Seve… Continue reading Synesthesia Attack Allows Hackers To Steal Data Via Screen Noise