EUVD-2023-43284

Malicious code in bioql PyPI...

EUVD-2022-15225

Malicious code in bioql PyPI...

EUVD-2024-47313

Malicious code in bioql PyPI...

EUVD-2022-27415

Malicious code in bioql PyPI...

EUVD-2022-36240

Malicious code in bioql PyPI...

EUVD-2022-37661

Malicious code in bioql PyPI...

EUVD-2023-43648

Malicious code in bioql PyPI...

EUVD-2023-30276

Malicious code in bioql PyPI...

EUVD-2022-37659

Malicious code in bioql PyPI...

EUVD-2022-40692

Malicious code in bioql PyPI...

EUVD-2025-13598

Malicious code in bioql PyPI...

EUVD-2022-35358

Malicious code in bioql PyPI...

EUVD-2025-24440

Malicious code in bioql PyPI...

EUVD-2024-21085

Malicious code in bioql PyPI...

WireTap: Breaking Server SGX via DRAM Bus Interposition

Whitepaper that delves into Intel’s Software Guard eXtension SGX. A common misconception is that physical attacks on SGX require expensive laboratory equipment, thus putting them out of reach of hobbyist-level attackers. In this work, the authors challenge this belief, showing how simple memory b...

New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer

In yet another piece of research, academics from Georgia Institute of Technology and Purdue University have demonstrated that the security guarantees offered by Intel's Software Guard eXtensions SGX can be bypassed on DDR4 systems to passively decrypt sensitive data. SGX is designed as a hardware...

CVE-2022-50448

In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix warning without PTEMARKERUFFDWP compiled in When PTEMARKERUFFDWP not configured, it's still possible to reach pte marker code and trigger an warning. Add a few CONFIGPTEMARKERUFFDWP ifdefs to make sure the code won't...

CVE-2022-50448 mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in

In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix warning without PTEMARKERUFFDWP compiled in When PTEMARKERUFFDWP not configured, it's still possible to reach pte marker code and trigger an warning. Add a few CONFIGPTEMARKERUFFDWP ifdefs to make sure the code won't...

New $50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections

A group of academics from KU Leuven and the University of Birmingham has demonstrated a new vulnerability called Battering RAM to bypass the latest defenses on Intel and AMD cloud processors. "We built a simple, $50 interposer that sits quietly in the memory path, behaving transparently during...

A week in security (September 22 – September 28)

Last week on Malwarebytes Labs: Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data Google and Flo to pay $56 million after misusing users’ health data Neon App pays users to record their phone calls, sells data for AI training updated New SVG-based phishing campaign ...