Lucene search
+L

1612 matches found

myhack58
myhack58
added 2018/05/22 12:0 a.m.19 views

Intel the reproduction of new vulnerabilities or be subjected to hackers implant attack script-vulnerability warning-the black bar safety net

5 on 22, reported,yesterday, Intel and Microsoft announced a Spectre and Meltdown security vulnerability, the new variant-the“variant 4”. The new variant is the use of“Speculative Store Bypass”, the defect enables the Processor chip to a potential unsafe area to disclose sensitive information...

0.3AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2018/05/10 2:11 p.m.47 views

Supply-Chain Security

Earlier this month, the Pentagon stopped selling phones made by the Chinese companies ZTE and Huawei on military bases because they might be used to spy on their users. It's a legitimate fear, and perhaps a prudent action. But it's just one instance of the much larger issue of securing our supply...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/05/05 8:22 a.m.119 views

8 New Spectre-Class Vulnerabilities (Spectre-NG) Found in Intel CPUs

A team of security researchers has reportedly discovered a total of eight new "Spectre-class" vulnerabilities in Intel CPUs, which also affect at least a small number of ARM processors and may impact AMD processor architecture as well. Dubbed Spectre-Next Generation, or Spectre-NG, the partial...

SaveExploits0
HackRead
HackRead
added 2018/04/24 5:40 p.m.57 views

All Nintendo Switch Consoles Contain Unpatchable Chip-Level Flaw

By Waqas Nintendo Switch has fans across the world; the gaming console This is a post from HackRead.com Read the original post: All Nintendo Switch Consoles Contain Unpatchable Chip-Level Flaw...

1.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/04/19 11:47 a.m.4 views

Facebook Plans to Build Its Own Chips For Hardware Devices

A new job opening post on Facebook suggests that the social network is forming a team to build its own hardware chips, joining other tech titans like Google, Apple, and Amazon in becoming more self-reliant. According to the post, Facebook is looking for an expert in ASIC and FPGA—two custom silic...

6.9AI score
SaveExploits0
Krebs on Security
Krebs on Security
added 2018/04/05 3:50 p.m.84 views

Secret Service Warns of Chip Card Scheme

The U.S. Secret Service is warning financial institutions about a new scam involving the temporary theft of chip-based debit cards issued to large corporations. In this scheme, the fraudsters intercept new debit cards in the mail and replace the chips on the cards with chips from old cards. When...

6.9AI score
SaveExploits0
ThreatPost
ThreatPost
added 2018/04/04 3:18 p.m.45 views

Intel Halts Spectre Fixes On Older Chips, Citing Limited Ecosystem Support

Intel has halted patches for an array of older chips that would protect them against the Spectre vulnerability, according to a recent microcode update. The microcode update shows that its older products – including Wolfdale, Bloomfield, Clarksfield, Gulftown, Harpertown, Jasper Forest, SoFIA 3GR,...

4.7CVSS0.9AI score0.74207EPSS
SaveExploits10References4
The Hacker News
The Hacker News
added 2018/04/04 11:17 a.m.166 views

Intel Admits It Won't Be Possible to Fix Spectre (V2) Flaw in Some Processors

As speculated by the researcher who disclosed Meltdown and Spectre flaws in Intel processors, some of the Intel processors will not receive patches for the Spectre variant 2 side-channel analysis attack In a recent microcode revision guidance PDF, Intel admits that it would not be possible to...

5.6CVSS6.8AI score0.74207EPSS
SaveExploits10
BDU FSTEC
BDU FSTEC
added 2018/04/04 12:0 a.m.9 views

The vulnerability of the Promontory chip, which is used together with Ryzen and Ryzen Pro processors, is related to the presence of undeclared capabilities of the ASIC chip that makes part of the Promontory chip. This allows access to physical memory.

The vulnerability of the Promontory chip, which is used together with Ryzen and Ryzen Pro processors, is related to the presence of undeclared capabilities of the ASIC chip that makes up the Promontory chip. Exploiting this vulnerability allows a perpetrator who has access to the targeted compute...

6CVSS5.4AI score0.01783EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2018/04/04 12:0 a.m.12 views

The vulnerability of the Promontory chip, which is used together with Ryzen and Ryzen Pro processors, is related to the presence of undeclared capabilities in its microprogramming software. This vulnerability allows access to physical memory.

The vulnerability of the Promontory chip, which is used together with Ryzen and Ryzen Pro processors, is related to the presence of undeclared capabilities in its microprogramming environment. Exploiting this vulnerability allows a perpetrator who has access to the targeted computer and possesses...

6CVSS5.4AI score0.01783EPSS
SaveExploits0References8
OSV
OSV
added 2018/04/03 6:29 a.m.4 views

CVE-2017-7065

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the "Wi-Fi" component. It allows remote attackers to execute arbitrary code on the Wi-Fi chip or cause a denial of service memory...

8.8CVSS7.6AI score0.01141EPSS
SaveExploits2References4
Openbugbounty
Openbugbounty
added 2018/04/01 7:37 p.m.10 views

chipdesignmag.com XSS vulnerability

Open Bug Bounty ID: OBB-595233 Description| Value ---|--- Affected Website:| chipdesignmag.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2018/03/26 2:26 p.m.49 views

Adding Backdoors at the Chip Level

Interesting research into undetectably adding backdoors into computer chips during manufacture: "Stealthy dopant-level hardware Trojans: extended version," also available here: Abstract: In recent years, hardware Trojans have drawn the attention of governments and industry as well as the scientif...

7AI score
SaveExploits0
HackRead
HackRead
added 2018/03/19 2:47 p.m.65 views

Prilex ATM Malware Modified to Clone Chip-and-Pin Payment Cards

By Uzair Amir It is just another day with just another ATM malware This is a post from HackRead.com Read the original post: Prilex ATM Malware Modified to Clone Chip-and-Pin Payment Cards...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2018/03/12 7:43 p.m.24 views

MOSQUITO Attack Allows Air-Gapped Computers to Covertly Exchange Data

The team of security researchers—who last month demonstrated how attackers could steal data from air-gapped computers protected inside a Faraday cage—are back with its new research showing how two or more air-gapped PCs placed in the same room can covertly exchange data via ultrasonic waves...

6.3AI score
SaveExploits0
CNVD
CNVD
added 2018/03/08 12:0 a.m.7 views

NVIDIA SHIELD TV NVIDIA Security Engine Information Disclosure Vulnerability

The NVIDIA SHIELD TV is a gaming console device from NVIDIA, U.S. The Security Engine is one of the... A security vulnerability exists in the RSA function of the NVIDIA Security Engine in NVIDIA SHIELD TV SE 6.2 and prior versions, which originates from the program clearing the read/write lockout...

5.5CVSS6.7AI score0.00153EPSS
SaveExploits0References1
NVD
NVD
added 2018/03/06 4:29 p.m.27 views

CVE-2017-6283

NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high...

5.5CVSS5AI score0.00153EPSS
SaveExploits0References1
Prion
Prion
added 2018/03/06 4:29 p.m.27 views

Information disclosure

NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high...

4.9CVSS6AI score0.00153EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/03/06 4:29 p.m.6 views

CVE-2017-6283

NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high...

5.5CVSS5.5AI score0.00153EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/03/06 4:0 p.m.33 views

CVE-2017-6283

NVIDIA Security Engine contains a vulnerability in the RSA function where the keyslot read/write lock permissions are cleared on a chip reset which may lead to information disclosure. This issue is rated as high...

6.2AI score0.00153EPSS
SaveExploits0References1
Rows per page
Query Builder