Collaborate Disseminate
Does anyone know if there is a place that I can learn more about the Spectre V4 (Speculative Store Bypass) vulnerability? Any paper did they publish? I already know what are V1-V3 and also the Foreshadow.
I found Intel’s de… Continue reading How Speculative Store Bypass (Spectre V4) Really Works?
It’s only September and yet 2018 is well on its way to being remembered as the year of fixing flaws we didn’t realise were possible in hardware we’d never heard of. Continue reading Intel releases firmware update for ME flaw
Since the discovery of Meltdown and Spectre, CPU security has been compromised and trust to the main manufacturers reduced, particularly Intel. 8 months later I wonder, what CPUs are more secure at this moment?
Why? Have the patches achie… Continue reading Are new AMD processors more secure than Intel ones?
I didn’t follow all the episodes about backdoors in Intel CPUs
What can intelligence or law enforcement agencies potentially do on a computer equipped with a vulnerable Intel CPU (connected to the Internet but not directly – behind a rout… Continue reading Privacy implications of Intel CPU backdoors [closed]
In the light of all the recent Intel Vulnerabilities with speculative execution, can speculative execution be fully disabled to protect from all this vulnerabilities, from BIOS or OS kernel?
Maybe stupid question, but is it… Continue reading Can speculative execution on intel cpu be disabled?
For Intel and more than a billion computers with Intel CPUs, the microprocessor flaws just keep coming. Continue reading ‘Foreshadow’ flaw found in Intel CPUs – what to do
By Waqas
Security fraternity is still dealing with the adverse consequences and versatile range of threats caused by the Spectre and Meltdown vulnerabilities. But, to add to their misery, there is another possibly worst hardware flaw detected by securi… Continue reading New Intel chip flaw “Foreshadow” attacks SGX technology to extract sensitive data
Intel processors are vulnerable to one or more L1 data cache information disclosure and terminal fault attacks via a speculative execution side channel. These attacks are known as L1 Terminal Fault:SGX,L1 Terminal Fault:OS/SMM,and L1 Terminal Fault:VMM. Continue reading VU#982149: Intel processors are vulnerable to a speculative execution side-channel attack called L1 Terminal Fault (L1TF)
Security experts discovered three new vulnerabilities affecting Intel processors that appear to be speculative execution flaws called Foreshadow. This is the code name under which has been assigned to the bugs, appearing to be yet another problem that … Continue reading Intel Processors Affected with Foreshadow Speculative Execution Flaws
It’s been at least a month or two since the last vulnerability in Intel CPUs was released, but this time it’s serious. Foreshadow is the latest speculative execution attack that allows balaclava-wearing hackers to steal your sensitive information. You know it’s a real 0-day because it already has a domain, a logo, and this time, there’s a video explaining in simple terms anyone can understand why the sky is falling. The video uses ukuleles in the sound track, meaning it’s very well produced.
The Foreshadow attack relies on Intel’s Software Guard Extension (SGX) instructions that allow user code to allocate …read more
Continue reading Foreshadow: The Sky Is Falling Again for Intel Chips