Intel Issues Updated Spectre Firmware Fixes For Newer Processors

Intel has issued updated microcode to help protect its newer processors from Spectre security exploits. The Santa Clara, Calif.-based company’s new microcode updates – which impact its newer chip platforms, such as Kaby Lake, Coffee Lake, and Skylake – have been released to OEM customers and...

Broadcom BCM4355C0 Wi-Fi Chip Becomes Denial of Service Vulnerable

Broadcom BCM4355C0 Wi-Fi chips is a Wi-Fi chip from Broadcom USA.Wi-Fi firmware is the firmware used in it. A security vulnerability exists in the Broadcom BCM4355C0 Wi-Fi chip version 9.44.78.27.0.1.56. An attacker could exploit this vulnerability to cause a denial of service heap or stack...

Would You Have Spotted This Skimmer?

When you realize how easy it is for thieves to compromise an ATM or credit card terminal with skimming devices, it's difficult not to inspect or even pull on these machines when you're forced to use them personally -- half expecting something will come detached. For those unfamiliar with the...

CVE-2018-5704

Open On-Chip Debugger OpenOCD 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site...

DEBIAN-CVE-2018-5704

Open On-Chip Debugger OpenOCD 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site...

UBUNTU-CVE-2018-5704

Open On-Chip Debugger OpenOCD 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site...

PT-2018-17099 · Open On Chip Debugger +1 · Openocd +1

Name of the Vulnerable Software and Affected Versions: Open On-Chip Debugger OpenOCD version 0.10.0 Description: The issue allows remote attackers to conduct cross-protocol scripting attacks and execute arbitrary commands via a crafted web site, by not blocking attempts to use HTTP POST for sendi...

The Spectre of Chips on Meltdown

The news is rife with emerging details of Intel and other chip vulnerabilities and the hardware bugs that can potentially exploit them. While details are still developing and will likely continue to be uncovered in the days, weeks, and even months ahead, we will explore what is known to date...

Scary Chip Flaws Raise Spectre of Meltdown

Apple, Google, Microsoft and other tech giants have released updates for a pair of serious security flaws present in most modern computers, smartphones, tablets and mobile devices. Here's a brief rundown on the threat and what you can do to protect your devices. At issue are two different...

January 4, 2017 – Morning Cyber Coffee Headlines – “Scrabble” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 4, 2018 - Headlines Carbon Black in the News: Ransomware: The Problem...

The vulnerability of the SoC circuit driver of MediaTek’s Android operating system, which allows a hacker to increase their privileges

Vulnerability of the SoC chip driver of MediaTek’s Android operating system. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of Broadcom BCM4355C0 Wi-Fi chip drivers allows a hacker to induce a service failure.

The vulnerability of the Broadcom BCM4355C0 Wi-Fi chip driver is caused by an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to trigger a stack overflow, cause the Wi-Fi device to become overloaded, and result in service failure, usin...

Apple: Heap overflow and information disclosure in "setVendorIE" when handling ioctl results(CVE-2017-7110)

Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi routers, and are capable of handling many Wi-Fi related events without delegating to the host OS. On iOS, the "AppleBCMWLANBusInterfacePCIe"...

Intel Puma Denial of Service Vulnerability (CNVD-2017-30934)

Intel Puma is a system-on-chip SoC from Intel. Intel Puma suffers from a denial of service vulnerability that allows remote attackers to cause a denial of service performance degradation by sending a moderate amount of small packets to many TCP or UDP ports...

CVE-2017-0827

An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-62539960. References: M-ALPS03353876, M-ALPS03353861, M-ALPS03353869, M-ALPS03353867, M-ALPS03353872...

The four mainstream Android phone manufacturers the BootLoader in the presence of multiple flaws vulnerability-vulnerability warning-the black bar safety net

University of California, Santa Barbara 9 the researchers found that the four mainstream chip manufacturers of the Android bootloader component the presence of multiple vulnerabilities. These vulnerabilities can lead to the phone chain of trust during the boot process is compromised, so that the...

Hidden Kill Switch Identified in Controversial Intel ME controller chip

By Uzair Amir Europe’s leading cyber-security firm Positive Technologies’ security researchers have a This is a post from HackRead.com Read the original post: Hidden Kill Switch Identified in Controversial Intel ME controller chip...

Doctor Implanted 6 MicroChips Under His Skin to Unlock Doors and Secure Data

Biohacking could be a next big thing in this smart world. At the beginning of this month, several dozen employees of Three Square Market 32M received microchip implants in their hands during a "chip party," allowing them to log into their office computers, open doors, and pay for food and drinks,...

Google Android Qualcomm Component SoC Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Qualcomm SoC driver is one of the Qualcomm system-on-chip drivers. An information disclosure vulnerability exists in the Qualcomm SoC driver in Android. An attacker could...

Continental TCU Stack Buffer Overflow Vulnerability

The TCU is a 2G modem commonly used in modern automobiles manufactured by Continental AG for transmitting data that enables communication between the car and remote management tools such as web panels and mobile applications. A stack buffer overflow vulnerability in the Continental TCU affects TC...