Security News
U.S. graphics chip specialist NVIDIA has released software updates to address a total of 26 vulnerabilities impacting its Jetson system-on-module series that could be abused by adversaries to escalate privileges and even lead to denial-of-service and information disclosure. Tracked from CVE‑2021‑34372 through CVE‑2021‑34397, the flaws affect products Jetson TX1, TX2 series, TX2 NX, AGX Xavier series, Xavier NX, and Nano and Nano 2GB running all Jetson Linux versions prior to 32.5.1.
Flaws impacting millions of internet of things devices running NVIDIA's Jetson chips open the door for a variety of hacks, including denial-of-service attacks or the siphoning of data. NVIDIA released patches addressing nine high-severity vulnerabilities including eight additional bugs of less severity.
NVIDIA is dropping support for Windows 7, Windows 8, and Windows 8.1 drivers starting in October. While drivers for Windows 7, Windows 8, and Windows 8.1 will continue to receive critical security updates through September 2024, they will no longer receive any non-security improvements.
NVIDIA announced today that it's halving the hash rate for Etehereum cryptocurrency mining on the new GeForce RTX 3080, 3070, and 3060 Ti graphics cards to make them less desirable for miners. "Today, we're taking additional measures by applying a reduced ETH hash rate to newly manufactured GeForce RTX 3080, RTX 3070 and RTX 3060 Ti graphics cards," said Matt Wuebbling, NVIDIA's Global Head of GeForce Marketing.
As scarcity and demand increase, gaining the online advantage through automation has taken hold as shopping bots invade online retailers to purchase desirable items, then resell them on the secondary market. As bots become more commonplace, human buyers are unleashing their dissatisfaction on the retailers through social media and taking their business elsewhere - but what happens when bots take over and there is nowhere else to turn?
The patches cover 13 different CVE numbers, running from CVE-2021-1074 to CVE-2021-1078 for the GPU driver fixes, and from CVE-2021-1080 to CVE-2021-1087 for the vGPU products. The GPU software bug that ended up with the highest "Base score" using the well-known CVSS bug-rating system was CVE-2021-1074, described as a "Vulnerability in the [GPU driver] installer where an attacker with local system access may replace an application resource with malicious files."
Nvidia has disclosed a group of security vulnerabilities in the Nvidia graphics processing unit display driver, which could subject gamers and others to privilege-escalation attacks, arbitrary code execution, denial of service and information disclosure. The Nvidia virtual GPU software also has a group of bugs that could lead to a range of similar attacks.
Update 4/24/21: Microsoft has begun pushing out a fix for the Windows 10 KB5001330 gaming issues. An NVIDIA staff member has suggested users roll back to an earlier version of Windows 10 to resolve gameplay issues on devices using NVIDIA GPUs.
Cloudalize announces a strategic partnership with Boston Limited to provide an in-house private cloud offering: Private GPU Cloud. This partnership brings together the expertise of Boston Limited in delivering data centre hardware solutions with the NVIDIA-powered Cloudalize Cloud Platform to provide a real alternative to traditional Virtual Desktop Infrastructure solutions, specifically for graphics visualisation use cases in architecture, engineering and construction, manufacturing and educational organizations.
NVIDIA this week unveiled Morpheus, a cloud-native application framework designed to help cybersecurity providers analyze more data without sacrificing performance. According to NVIDIA, Morpheus leverages machine learning to identify anomalies and threats - such as phishing, data leaks and malware - through real-time inspection of all IP traffic in an organization's data centers.