Security News

SPOILER alert, literally: Intel CPUs afflicted with simple data-spewing spec-exec vulnerability
2019-03-05 06:34

'Leakage ... is visible in all Intel generations starting from first-gen Core CPUs' Updated Further demonstrating the computational risks of looking into the future, boffins have found another way...

'This collaboration is absolutely critical going forward'... One positive thing about Meltdown CPU hole? At least it put aside tech rivalries...
2019-02-15 07:12

Execs, experts hope this cooperation continues to hold for the next big bug A panel of eggheads from Intel, the US government, and academia held court this week to figure how they can keep the...

In case you're not already sick of Spectre... Boffins demo Speculator tool for sniffing out data-leaking CPU holes
2018-12-07 23:59

First proof-of-concept, SplitSpectre, requires fewer instructions in victim Analysis You've patched your Intel, AMD, Power, and Arm gear to crush those pesky data-leaking speculative execution...

Linux kernel Spectre V2 defense fingered for massively slowing down unlucky apps on Intel Hyper-Thread CPUs
2018-11-20 01:34

This is on by default? 'Yikes' says Chipzilla techie Linux supremo Linus Torvalds has voiced support for a kernel patch that limits a previously deployed defense against Spectre Variant 2, a...

7 New Meltdown and Spectre-type CPU Flaws Affect Intel, AMD, ARM CPUs
2018-11-14 15:33

Disclosed earlier this year, potentially dangerous Meltdown and Spectre vulnerabilities that affected a large family of modern processors proven that speculative execution attacks can be exploited...

PortSmash Side-Channel Attack Siphons Data From Intel, Other CPUs
2018-11-05 17:56

An exploit was released for a flaw existing in a process in CPUs called Simultaneous Multithreading (SMT).

New Intel CPU Flaw Exploits Hyper-Threading to Steal Encrypted Data
2018-11-04 09:33

A team of security researchers has discovered another serious side-channel vulnerability in Intel CPUs that could allow an attacker to sniff out sensitive protected data, like passwords and...

PortSmash attack punches hole in Intel's Hyper-Thread CPUs, leaves with crypto keys
2018-11-02 20:18

Side-channel timing technique exploits SMT – but you'll need to be running malware on the machine already Brainiacs in Cuba and Finland have found a new side-channel vulnerability in Intel x64...

Oracle CPU October 2018: 301 vulnerabilities patched
2018-10-17 12:53

Oracle has released its Critical Patch Update for October 2018, fixing 301 vulnerabilities across a wide range of its products, including Oracle Database Server, Oracle E-Business Suite, Oracle...

New Ninth-Gen Intel CPUs Shield Against Some Spectre, Meltdown Variants
2018-10-09 19:37

New Intel Coffee Lake CPUs offer hardware-based protections against some -but not all- Spectre and Meltdown variants.