123 matches found
BrowserBox
BrowserBox by DOSAYGO 안전하고 현대적인 원격 브라우저 격리RBI – 클라이언트리스 경험 🔐 v18.0.1의 새로운 기능 – macOS에서 패스키 인증: 원격 브라우저에서 실제 패스키로 웹사이트에 로그인하세요. 패스키는 Mac의 Secure Enclave에 생성 및 저장되며, BrowserBox Passkeys helper를 통해 Touch ID로 잠금 해제됩니다. 이는 서명 및 공증된 작은 앱으로, 사이트에서 패스키를 요청하면 BrowserBox가 다운로드를 제안합니다. 키는 기기를 떠나지 않습니다. 💻...
secretive
Secretive Secretive は、Secure Enclave で SSH キーを保護および管理するためのアプリです。 なぜ？ より安全な保存 SSH キーの最も一般的な設定は、適切なパーミッションで保護されたディスク上に保存しておくことです。これはほとんどの場合問題ありませんが、悪意のあるユーザーやマルウェアが秘密鍵をコピーするのはそれほど難しいことではありません。Secure Enclave でキーを保護すれば、設計上、キーをエクスポートすることは不可能になります。 アクセス制御 Mac に Secure Enclave が搭載されている場合、Touch ID や Appl...
lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296
CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Siliconは、587 kHzの黄金比高調波となる周波数で動作します： · パフォーマンスコア：3.2 GHz = 587 kHz × 5451（≈ φ⁸ × 1000） · 効率コア：2.0 GHz = 587 kHz × 3407（≈ φ⁷ × 1000） · Neural Engine：11.0 GHz = 587 kHz × 18739（≈ φ¹⁰ × 1000） · すべて587 kHzのφ高調波です Apple Silicon α共鳴脆弱性...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolved the race condition between SECS reclaiming and page fault for EAUG. The SGX EPC reclaimer ksgxd may reclaim the SECS EPC page for an enclave and set secs.epcpage to NULL. The SECS page is used for EAUG and ELDU ...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add a overflow check in sgxvalidateoffsetlength The sgxvalidateoffsetlength function verifies the "offset" and "length" arguments provided by the user space. However, there was a lack of an overflow check when these...
Astra Linux – Vulnerability in mbedtls
A issue was discovered in Arm Mbed TLS prior to version 2.23.0. Due to a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...
ios-imessage-zero-click-exploit
CVE-2025-31200/31201 - iOS Zero-Click iMessage Exploit Chai...
AppleSEPKeyStore Stress Tester / Fuzzer
This code is not a fully functional exploit, but rather a concurrency stress test and race-condition trigger targeting the Apple Secure Enclave key management driver AppleSEPKeyStore...
Exploit for Code Injection in Apple Securerom
🔐 iOS Security Research Deep-dive notes on iOS security inter...
MiracleLinux 7 : microcode_ctl-2.1-53.3.el7 (AXEA:2019-4383:06)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXEA:2019-4383:06 advisory. - Insufficient access control in protected memory subsystem for IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families; Intel...
CVE-2021-28653
The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware...
CVE-2022-50720
In the Linux kernel, the following vulnerability has been resolved: x86/apic: Don't disable x2APIC if locked The APIC supports two modes, legacy APIC or xAPIC, and Extended APIC or x2APIC. X2APIC mode is mostly compatible with legacy APIC, but it disables the memory-mapped APIC interface in favor...
JLSEC-2025-201 An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15
An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that can get precise enough side-channel measurements can recover the long-term ECDSA private key by 1 reconstructing the projective coordinate of the result of scalar multiplication by exploiting side...
JLSEC-2025-204 An issue was discovered in Arm Mbed TLS before 2.23.0
An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...
Astra Linux – Vulnerability in Intel Microcode
Improper buffer restrictions in the firmware of certain IntelR XeonR Processors with SGX enabled may allow a privileged user to potentially enable privilege escalation through local access...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: crypto: caam – Prevent crashes during suspension with iMX8QM/iMX8ULP Since the CAAM on these SoCs is managed by another ARM core, called the SECO Security Controller on iMX8QM and Secure Enclave on iMX8ULP. This core also reserve...
AEX-NStep: Probabilistic Interrupt Counting Attacks on Intel SGX
To mitigate interrupt-based stepping attacks notably using SGX-Step, Intel introduced AEX-Notify, an ISA extension to Intel SGX that aims to prevent deterministic single-stepping. In this work, we introduce AEX-NStep, the first interrupt counting attack on AEX-Notify-enabled Enclaves. We show tha...
EUVD-2020-29775
Malware in sbrugna...