Information leak via side effects of speculative execution

ISSUE DESCRIPTION Processors give the illusion of a sequence of instructions executed one-by-one. However, in order to most efficiently use cpu resources, modern superscalar processors actually begin executing many instructions in parallel. In cases where instructions depend on the result of...

UBUNTU-CVE-2017-5754

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache...

Meltdown and Spectre CPU Flaws Affect Intel, ARM, AMD Processors

Unlike the initial reports suggested about Intel chips being vulnerable to some severe ‘memory leaking’ flaws, full technical details about the vulnerabilities have now been emerged, which revealed that almost every modern processor since 1995 is vulnerable to the issues. Disclosed today by Googl...

Huge Flaws Affect Nearly Every Modern Device; Patch Could Hit CPU Performance

UPDATE: Researchers have finally disclosed complete technical details of two kernel side-channel attacks, Meltdown and Spectre—which affect not only Intel but also systems and devices running AMD, ARM processors—allowing attackers to steal sensitive data from the system memory. The first week of...

Security Advisory 0031

Security Advisory 0031 PDF Date: January 3rd, 2018 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | January 3rd, 2018 | Initial Release 1.1 | January 8th, 2018 | Updated description with expanded analysis Arista Products vulnerability report for the following CVEs: Spectre CVE-2017-5753:...

Meltdown and Spectre Side-Channel Vulnerabilities

US-CERT is aware of a set of security vulnerabilities—known as Meltdown and Spectre—that affect modern computer processors. Exploitation of these vulnerabilities could allow an attacker to obtain access to sensitive information. Users and administrators are encouraged to review Vulnerability Note...

Geometry Dash Meltdown - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Geometry Dash Meltdown published at the 'play' market has multiple vulnerabilities...

MOTOCROSS MELTDOWN - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application MOTOCROSS MELTDOWN published at the 'play' market has multiple vulnerabilities...

LinkedIn Intro Service to Shut Down March 7

LinkedIn announced on Friday it was shuttering its four-month-old Intro service which stirred up a privacy meltdown shortly after its release in October. Intro was an integrated service for iOS which sat as a proxy between the built-in iOS mail client and the user’s email provider. Intro would...

Alessandro Acquisti Discussed Facebook Research

Carnegie Mellon University researcher Alessandro Acquisti spoke at Black Hat on the “Faces of Facebook,” in which he discussed research showing how facial recognition software can be used to unite disparate silos of public and private data online, creating a comprehensive, Minority Report-style...