HPSBHF03595 rev. 6 - LoJax UEFI Rootkit

Potential Security Impact Elevation of Privilege, Information Disclosure, Loss of Confidentiality, Loss of Integrity. Source: HP, HP Product Security Response Team PSRT Reported by: ESET Research VULNERABILITY SUMMARY HP has identified a potential security vulnerability with a UEFI rootkit LoJax...

[SECURITY] Fedora 29 Update: dislocker-0.7.1-10.fc29

Dislocker has been designed to read BitLocker encrypted partitions "drives " under a Linux system. The driver has the capability to read/write partitions encrypted using Microsoft Windows Vista, 7, 8, 8.1 and 10 AES-CBC, AES-XTS, 128 or 256 bits, with or without the Elephant diffuser, encrypted...

Researchers Heat Up Cold-Boot Attack That Works on All Laptops

A pair of researchers have developed an attack method that can bypass mitigations for cold-boot attacks on laptops. A physical attacker can compromise a laptop that’s in sleep mode, potentially lifting sensitive passwords, encryption keys and other information. The ramifications are, on the...

R0Ak (The Ring 0 Army Knife) - A Command Line Utility To Read/Write/Execute Ring Zero On For Windows 10 Systems

r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Quick Peek r0ak v1.0.0 -- Ring 0 Army Knife...

Whole Disk Encryption with Intel Optane Memory Modules - Lenovo Support US

No description provided...

Whole Disk Encryption with Intel Optane Memory Modules - US

Lenovo Security Advisory: LEN-22881 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3619 Summary Description: Intel has identified an issue where configuring an Optane memory module before enabling BitLocker whole disk encryption...

Ring 0 Army Knife: r0ak

r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Motivation The Windows kernel is a rich environment in which hundreds of...

Intel® Optane™ memory module update

Summary: Information disclosure vulnerability in storage media in systems with Intel® Optane™ memory module with Whole Disk Encryption may allow an attacker to recover data via physical access. Description: Intel identified an issue where some systems configured with Whole Disk Encryption and an...

HPSBHF03587 rev. 1 - Information Disclosure Vulnerability in Storage Media in Systems with Intel® Optane™ Memory Module with Whole Disk Encryption

Potential Security Impact Some platforms configured with Whole Disk Encryption and an Intel® Optane™ memory module, may be at risk of data remaining unencrypted and potentially accessible under specific conditions. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILIT...

Active Directory Reconnaissance: ADRecon

ADRecon is a tool which extracts various artifacts as highlighted below out of an AD environment in a specially formatted Microsoft Excel report that includes summary views with metrics to facilitate analysis. The report can provide a holistic picture of the current state of the target AD...

Microsoft Windows: Allow indexing of encrypted files

This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing will attempt to decrypt and index the content access restrictions will still apply. If you disable this policy setting, the search service components including non-Microsoft components are expect...

Microsoft Windows: Require additional authentication at startup (TPM startup key)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winaddauthtpmstartupkey.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Require additional authentication at startup: Configure TPM startup key Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH...

Microsoft Windows: Allow enhanced PINs for startup

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winenhancedpinsstartup.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow enhanced PINs for startup Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Microsoft Windows: BitLocker-protected removable drives recovery (AD backup info)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmbitlockerrecoveryadinfo.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected removable drives can be recovered: Configure storage of BitLocker recovery information to AD DS Authors:...

Microsoft Windows: Use of smart cards on removable data drives

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmconfiguresmartcards.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure use of smart cards on removable data drives Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Require additional authentication at startup (TPM startup key and PIN)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winaddauthtpmstartuppinkey.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Require additional authentication at startup: Configure TPM startup key and PIN Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows 10: Disable new DMA devices when this computer is locked

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windmadeviceslocked.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Disable new DMA devices when this computer is locked Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Write access to devices configured in another organization

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmdenycrossorgwrite.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Deny write access to removable drives not protected by BitLocker: Do not allow write access to devices configured in another organization Authors:...

Microsoft Windows: BitLocker-protected removable drives recovery

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmbitlockerrecovery.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Choose how BitLocker-protected removable drives can be recovered Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Require additional authentication at startup

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winadditionalauthstartup.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Require additional authentication at startup Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net...