12px13px15px17px
Date:16/05/19

ZombieLoad attack lets hackers steal data from Intel chips

A newly discovered security flaw in Intel processors allows attackers to steal any data that’s been recently accessed by the processor. That even holds true on cloud servers, which could allow an attacker to steal information from other virtual machines running on the same PC.
 
It’s not known whether the attack, dubbed ZombieLoad, has been used by malicious hackers. The flaw was discovered by researchers from Graz University of Technology and was disclosed to Intel. Intel has issued code to patch the flaw, though it has to be implemented by individual manufacturers and then installed by users before everyone is protected.
 
The flaw affects almost every Intel chip since 2011, according to TechCrunch. Wired reports that Apple and Google have already issued updates, while Microsoft announced the availability of updates today. Attackers have to be able to run code on a machine in order to take advantage of ZombieLoad, so this isn’t a flaw everyone is imminently at risk from.
 
Intel says that its two most recent generations of Core processors prevent against this type of attack, known as Microarchitectural Data Sampling, at a hardware level. Some sever chips are protected as well. All other processors require software updates, Intel says. “[We] encourage everyone to keep their systems up to date, as its one of the best ways to stay protected,” the company says in a statement.
 
ZombieLoad is the latest in a string of serious security flaws that take advantage of a process, known as speculative execution, that’s built into most modern processors. The feature allows processors to preemptively execute future commands, offering speed increases. But as researchers first discovered with Spectre and Meltdown, that process leaves some gaping vulnerabilities for attackers to slip through.
 
Fixing those vulnerabilities has required patching processors in ways that can slightly slow them down. But the fixes don’t cut off the attack vector entirely — speculative execution is an area that researchers expect to keep finding flaws. Spectre and Meltdown were the first two, and another was discovered just months later.
 
So far, these attacks haven’t had the horrendous effects researchers warned about. There have been a load of patches, but slowdowns have been minor and there’s yet to be a major known attack taking advantage of these flaws. That certainly doesn’t mean those problems will never come, though, and with years of computers filled with threatened chips, it’s likely more attacks will continue to be found.





Views: 3

©ictnews.az. All rights reserved.

Facebook Google Favorites.Live BobrDobr Delicious Twitter Propeller Diigo Yahoo Memori MoeMesto






22 August 2019

21 08 2019

21/08/19
Worlds first link layer protocol brings quantum internet closer to a reality

Researchers from QuTech have achieved a world's first in quantum internet technology

21/08/19
Cellphone breaks not good for your brain: Study

Using a cellphone to take a break during mentally challenging tasks does not allow the 

21/08/19
Google’s lightweight Go search app is now available worldwide

A year and a half after it had a limited launch in India and Indonesia, the lightweight 

21/08/19
Microsoft’s new SMS Organizer app for Android filters out spam messages

Microsoft has created an SMS Organizer app for Android that’s designed to automatically 

21/08/19
Cerebras Systems unveils a record 1.2 trillion transistor chip for AI

New artificial intelligence company Cerebras Systems is unveiling the largest semiconductor 

21/08/19
Data driven Bosch jointly develops innovative security solution with NetApp

NetApp, a leading data authority for hybrid cloud, and Bosch Building Technologies