1892 matches found
Cross-VM Side-channel attacks against cryptography keys
A group of researchers has developed a side-channel attack targeting virtual machines that could pose a threat to cloud computing environments. Side-channel attacks against cryptography keys have, until now, been limited to physical machines, this attack is the first such attack demonstrated on a...
Side-Channel Attack Steals Crypto Key from Co-Located Virtual Machines
Side-channel attacks against cryptography keys have, until now, been limited to physical machines. Researchers have long made accurate determinations about crypto keys by studying anything from variations in power consumption to measuring how long it takes for a computation to complete. A team of...
More VMware ESX Source Code Posted Online
For the third time this year, VMware ESX source code has been posted online. A hacker known as Stun claiming to be affiliated with Anonymous tweeted a link to a torrent site hosting the stolen VMkernel source code. VMware director of platform security Iain Mulholland acknowledged the breach on...
[SECURITY] Fedora 18 Update: mom-0.3.0-1.fc18
MOM is a policy-driven tool that can be used to manage overcommitment on KVM hosts. Using libvirt, MOM keeps track of active virtual machines on a host. At a regular collection interval, data is gathered about the host and guests. Data can come from multiple sources eg. the /proc interface, libvi...
Critical Flaw Reported in CloudStack
The Apache Software Foundation is warning users about a configuration problem in the open-source CloudStack platform that could allow an attacker to take a number of unwanted actions, including deleting all of the virtual machines on a system. CloudStack is a project that’s under incubation at th...
Sandia Lab's MegaDroid Project Builds Out Massive Android Test Platform
It might sound like a security researcher’s worst nightmare to string together 300,000 virtual instances of the Android OS, but for scientists at Sandia National Laboratories, it’s just another day. The Department of Energy-sponsored national security-focused laboratory released the MegaDroid...
Fedora Update for xen FEDORA-2012-13443
Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-13443 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for xen FEDORA-2012-13434
Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-13434 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
[SECURITY] Fedora 18 Update: xen-4.1.3-4.fc18
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 18 Update: virt-viewer-0.5.3-6.fc18
Virtual Machine Viewer provides a graphical console client for connecting to virtual machines. It uses the GTK-VNC or SPICE-GTK widgets to provide the display, and libvirt for looking up VNC/SPICE server details...
[SECURITY] Fedora 16 Update: xen-4.1.3-2.fc16
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 17 Update: xen-4.1.3-4.fc17
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
qemu security update
CentOS Errata and Security Advisory CESA-2012:1234 Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...
Qubes OS Release Enhances Security Via Domain Isolation
With the deluge of malware and advanced attacks continuing unabated, security approaches that sandbox applications or isolate processes are garnering increased attention. Researcher Joanna Rutkowska and Invisible Things Lab were the latest to go in that direction with the official release on...
Fedora Update for xen FEDORA-2012-11755
Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-11755 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for xen FEDORA-2012-11182
Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-11182 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for openstack-nova FEDORA-2012-10939
Check for the Version of openstack-nova OpenVAS Vulnerability Test Fedora Update for openstack-nova FEDORA-2012-10939 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
The Rise of Cross-Platform Malware
For most of the recorded history of malware, viruses, Trojans and other malicious software have been specialists. Each piece of malware typically targeted one platform, be it Windows, OS X or now, one of the mobile platforms. But the last few months have seen the rise of cross-platform malware th...
Crisis Trojan Makes Its Way onto Virtual Machines
The Windows version of the Crisis Trojan is able to sneak onto VMware implementations, making it possibly the first malware to target such virtual machines. It also has found a way to spread to Windows Mobile devices. “Many threats will terminate themselves when they find a virtual machine...