12px13px15px17px
Date:16/05/19

ZombieLoad attack lets hackers steal data from Intel chips

A newly discovered security flaw in Intel processors allows attackers to steal any data that’s been recently accessed by the processor. That even holds true on cloud servers, which could allow an attacker to steal information from other virtual machines running on the same PC.
 
It’s not known whether the attack, dubbed ZombieLoad, has been used by malicious hackers. The flaw was discovered by researchers from Graz University of Technology and was disclosed to Intel. Intel has issued code to patch the flaw, though it has to be implemented by individual manufacturers and then installed by users before everyone is protected.
 
The flaw affects almost every Intel chip since 2011, according to TechCrunch. Wired reports that Apple and Google have already issued updates, while Microsoft announced the availability of updates today. Attackers have to be able to run code on a machine in order to take advantage of ZombieLoad, so this isn’t a flaw everyone is imminently at risk from.
 
Intel says that its two most recent generations of Core processors prevent against this type of attack, known as Microarchitectural Data Sampling, at a hardware level. Some sever chips are protected as well. All other processors require software updates, Intel says. “[We] encourage everyone to keep their systems up to date, as its one of the best ways to stay protected,” the company says in a statement.
 
ZombieLoad is the latest in a string of serious security flaws that take advantage of a process, known as speculative execution, that’s built into most modern processors. The feature allows processors to preemptively execute future commands, offering speed increases. But as researchers first discovered with Spectre and Meltdown, that process leaves some gaping vulnerabilities for attackers to slip through.
 
Fixing those vulnerabilities has required patching processors in ways that can slightly slow them down. But the fixes don’t cut off the attack vector entirely — speculative execution is an area that researchers expect to keep finding flaws. Spectre and Meltdown were the first two, and another was discovered just months later.
 
So far, these attacks haven’t had the horrendous effects researchers warned about. There have been a load of patches, but slowdowns have been minor and there’s yet to be a major known attack taking advantage of these flaws. That certainly doesn’t mean those problems will never come, though, and with years of computers filled with threatened chips, it’s likely more attacks will continue to be found.





Views: 42

©ictnews.az. All rights reserved.

Facebook Google Favorites.Live BobrDobr Delicious Twitter Propeller Diigo Yahoo Memori MoeMesto






24 May 2019

24/05/19
Schoolchildren in Shabran were informed about internet opportunities and threats

Aztelecom LLC of the Ministry of Transport, Communications and High Technologies held a seminar on the subject

24/05/19
Startup tour held in Shaki within project "I2B – From Idea to Business"

The startup tours held within the framework of the project “I2B – From Idea to Business” organized jointly by

24/05/19
Worldwide Connected Vehicle Shipments Forecast to Reach 76 Million Units by 2023, According to IDC

In its inaugural connected vehicle forecast, International Data Corporation (IDC) estimates that worldwide shipments

24/05/19
Facebook Removes a Record 2.2 Billion Fake Accounts

Facebook Inc. said it removed 2.2 billion fake accounts in the first quarter, a record that shows how the company

24/05/19
Samsung Galaxy A70S Will Be the World’s First Smartphone With a 64-Megapixel Camera: Report

Samsung launched its Galaxy A70 smartphone globally in March this year. The phone features an Infinity

24/05/19
Amazon Is Working on a Device That Can Read Human Emotions

Amazon.com Inc. is developing a voice-activated wearable device that can recognize human emotions.

24/05/19
Apple again becomes world’s most valuable brand

Apple has topped the list of the world’s most valuable brands for the ninth year in a row alongside a slew of tech titans.

24/05/19
Atom Power releases new UL-listed digital circuit breaker to intelligently manage DERs

Atom Power announced its innovative digital circuit breaker technology is now UL-listed. The company says this

24/05/19
Persistence of Chaos: Laptop infected with world’s most dangerous malware up for sale

“The Persistence of Chaos combines the six most dangerous viruses of all time on one laptop. The art project 

23 05 2019

23/05/19
International workshop on “ICT infrastructure as basis for digital economy” held

An international workshop on “ICT infrastructure as basis for digital economy” was held for Europe and the CIS 

23/05/19
SPbSUT scientists developing sound-based data transfer protocol

Scientists from the Radio Communications & Broadcasting Department of the Bonch-Bruevich Saint-Petersburg

23/05/19
Scientists will create a protection system that will detect up to 98% of cyber attacks

A group of Russian scientists from the Information Security Center of Innopolis University are working to create 

23/05/19
Information boards were installed at the transport hub of the Baku International Bus Terminal Complex

Information boards have been installed at the transport hub, which was recently commissioned at the auxiliary

23/05/19
WhatsApp will show ads in Status section starting next year

Starting next year WhatsApp will display advertisements in the Status section, a feature it calls Status Ads.

23/05/19
Baku Telephone Communications LLC increases capacity of wireless communication network before summer season

Given the upcoming summer-season influx of residents of the capital to Baku’s suburbs, as in the previous years,

23/05/19
Building built in Guba for Garabagh war veterans provided with communication services

Aztelecom LLC of the Ministry of Transport, Communications and High Technologies has provided the building

23/05/19
First official version of Tor Browser for Android released on the Play Store

The Tor Project has released on the Google Play Store the first stable version of the Tor Browser for Android.

23/05/19
DDoS Attacks on the Rise After Long Period of Decline

Last year there was a significant drop in DDOS attack detection. However, according to a new survey by Kaspersky 

23/05/19
Samsung announces ultra-slim 5X Optical zoom camera module

Samsung Electro-Mechanics commenced its sojourn in the camera module market in 2003 and since then, the

23/05/19
Ford taps Agility Robotics’ bipedal robot to test package delivery

In the future, humanoid robots will emerge from driverless vans to deliver parcels to your doorstep. That’s the