Collaborate Disseminate
Various versions of Spectre, Meltdown, Foreshadow and ZombieLoad make it quite the jungle trip to navigate which CPUs are affected, how to mitigate them.
Right now, my problem is that I need a new computer but I want to make sure that I bu… Continue reading How to select a CPU to buy for the best security?
New side-channel attacks have been disclosed in AMD CPUs, however AMD said that they are not new. Continue reading AMD Downplays CPU Threat Opening Chips to Data Leak Attacks
Forget the infamous Meltdown and Spectre chip flaws from 2018, the problem that’s tying down Intel’s patching team these days is a more recent class of side channel vulnerabilities known collectively as ZombieLoad. Continue reading Intel promises fix after researchers reveal ‘CacheOut’ CPU flaws
Researchers have release a new proof-of-concept attack targeting a new Intel Speculative-type bug called CacheOut present in most Intel CPUs. Continue reading New ‘CacheOut’ Attack Targets Intel CPUs
As if Meltdown, Spectre and Foreshadow were not enough, recently a new critical vulnerability called ZombieLoad has been discovered that affects a series of modern Intel processors. This vulnerability enables a potential attacker to read small pieces … Continue reading Can Applications Withstand the ZombieLoad Attack?
Intel releases microcode for CPUs affected by a new kind of MDS attack and says that previous microcode updates reduce the attack surface but don’t provide complete protection.
The post Intel Releases Microcode Update for CPUs Affected by Zomieload v2 appeared first on Petri.
Continue reading Intel Releases Microcode Update for CPUs Affected by Zomieload v2
An issue was discovered in libarchive through Google’s ClusterFuzz project. Libarchive is a compression and decompression library, widely used in utilities. The issue here is how the library recovers from a malformed archive. Hitting an invalid header causes the memory in use to be freed. The problem is that it’s …read more
Continue reading This Week in Security: Fuzzing Fixes, Foul Fonts, TPM Timing Attacks, and More!
Mirror, mirror on the wall, which is the worst side-channel vulnerability of them all? Continue reading Linux maintainer: Patching side-channel flaws is killing performance
There is a CPU vulnerability Microarchitectural Fill Buffer Data Sampling.
I use a Linux OS and I think to fix Microarchitectural Fill Buffer Data Sampling you need to update intel microcode or update kernel to a fixed one h… Continue reading Do I need microcode update if I update Kernel?
A lot of thought and meaning goes into the naming of infamous CPU side channel flaws, like ZombieLoad, Spectre and Meltdown. Continue reading Behind the Naming of ZombieLoad and Other Intel Spectre-Like Flaws