Security News

SLAM Attack: New Spectre-based Vulnerability Impacts Intel, AMD, and Arm CPUs
2023-12-09 11:52

Researchers from the Vrije Universiteit Amsterdam have disclosed a new side-channel attack called SLAM that could be exploited to leak sensitive information from kernel memory on current and...

New Spectre Flaws in Intel and AMD CPUs Affect Billions of Computers
2021-05-07 04:52

A team of academics from the University of Virginia and University of California, San Diego, have discovered a new line of attack that bypasses all current Spectre protections built into the chips, potentially putting almost every system - desktops, laptops, cloud servers, and smartphones - once again at risk just as they were three years ago. The disclosure of Spectre and Meltdown opened a floodgates of sorts, what with endless variants of the attacks coming to light in the intervening years, even as chipmakers like Intel, ARM, and AMD have continually scrambled to incorporate defenses to alleviate the vulnerabilities that permit malicious code to read passwords, encryption keys, and other valuable information directly from a computer's kernel memory.

New Spectre-Like Attacks
2021-05-05 15:35

There's new research that demonstrates security vulnerabilities in all of the AMD and Intel chips with micro-op caches, including the ones that were specifically engineered to be resistant to the Spectre/Meltdown attacks of three years ago. The new line of attacks exploits the micro-op cache: an on-chip structure that speeds up computing by storing simple commands and allowing the processor to fetch them quickly and early in the speculative execution process, as the team explains in a writeup from the University of Virginia.

SWAPGS Attack: A new Spectre haunts machines with Intel CPUs
2019-08-06 23:10

Bitdefender researchers have uncovered yet another viable speculative execution side-channel attack that can be leveraged against Intel CPUs and the computers running on them. The SWAPGS Attack,...

New Spectre attack enables secrets to be leaked over a network
2018-07-26 21:40

It's no longer necessary to run attacker code on the victim system.

New Spectre-Level Flaw Targets Return Stack Buffer
2018-07-23 18:27

The most recent Spectre-class flaw targets a component in CPUs called the return stack buffer.

Two New Spectre-Class CPU Flaws Discovered—Intel Pays $100K Bounty
2018-07-11 11:48

Intel has paid out a $100,000 bug bounty for new processor vulnerabilities that are related to Spectre variant one (CVE-2017-5753). The new Spectre-class variants are tracked as Spectre 1.1...

Intel Pays $100,000 Bounty for New Spectre Variants
2018-07-11 05:13

Researchers have discovered new variations of the Spectre attack and they received $100,000 from Intel through the company’s bug bounty program. The new flaws are variations of Spectre Variant 1...

New Spectre-like attack uses speculative execution to overflow buffers
2018-07-10 21:00

Research is continuing to find new attack vectors.

Oracle Patches New Spectre, Meltdown Vulnerabilities
2018-06-25 04:35

Oracle announced on Friday that it has started releasing software and microcode updates for products affected by the recently disclosed variants of the Spectre and Meltdown vulnerabilities. read more