740 matches found
sgx-step
A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...
IoT-Pentest-devices-and-purpose
IoTペネトレーションテストデバイスとその目的 - 2025年版 このドキュメントは、2025年のIoTセキュリティテスト向け最新ツールとハードウェアを概説し、さまざまなプロトコルやテクノロジーをカバーしています。最先端の攻撃、新たに発見された脆弱性、および強化された機能を備えた最新のハードウェアおよびソフトウェアツールが含まれています。 目次 Bluetooth Zigbee Z-Wave WiFi Hardware Side Channel Attacks SCA Automotive Security Radio Frequency NFC and RFID Latest 2025...
In-Spectre-Meltdown
In-Spectre-Meltdown このツールは、多くの最新プロセッサおよびオペレーティングシステムの設計に影響を与える投機的実行サイドチャネル攻撃をチェックするためのものです。CVE-2017-5754（Meltdown）およびCVE-2017-5715（Spectre）により、非特権プロセスが特権プロセスから機密情報を盗み出すことが可能になります。これらの攻撃は、CPU上のデータ保護対策を侵害する3つの異なる方法を提供し、攻撃者が本来読めないデータを読み取ることを可能にします。...
TID-The-Instant-Destroyer
TID — 即时销毁器 针对基于缓存的旁路攻击防护领域的独立安全研究。 概述 TID 是一种专用协议，旨在在使用后立即从 CPU 缓存层（$L1、L2$ 和 $L3$）中消除敏感数据残留（例如加密密钥）。它解决了数据在系统内存（RAM）中被擦除后仍存在于硬件结构中的关键安全漏洞。 主要成就 已验证的防御： 有效缓解 Flush+Reload 及类似的微架构旁路攻击。 可衡量的性能： 未受保护的访问： 78 CPU 周期（缓存命中）。 TID 保护的访问： 286 CPU 周期（缓存未命中）。 安全边际： 提供 3.7 倍延迟屏障 ，成功迷惑潜在攻击者。 硬件级精度： 利用优化的 CPU...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21 of GitHub Enterprise Server, there was a security...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error during the intra-handshake attestation.. An attacker can impersonate a trusted service endpoint and gain unauthorized access to sensitive data or operations by extracting the ephemeral TLS private key through...
Red-Teaming Claude Opus and ChatGPT-Based Security Advisors for Trusted Execution Environments
Trusted Execution Environments TEEs e.g., Intel SGX and ArmTrustZone aim to protect sensitive computation from a compromised operating system, yet real deployments remain vulnerable to microarchitectural leakage, side-channel attacks, and fault injection. In parallel, security teams increasingly...
Trojan-Resilient NTT: Protecting against Control Flow and Timing Faults on Reconfigurable Platforms
Number Theoretic Transform NTT is the most essential component for polynomial multiplications used in lattice-based Post-Quantum Cryptography PQC algorithms such as Kyber, Dilithium, NTRU etc. However, side-channel attacks SCA and hardware vulnerabilities in the form of hardware Trojans may alter...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003848)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003848 advisory. kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of...
CVE-2022-26382
While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts. Side-channel attacks on the text by using specially crafted fonts could have lead to this text being inferred by the webpage. This vulnerability affects Firefox 98...
CVE-2019-18222
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks...
Navigating the Dual-Use Nature and Security Implications of Reconfigurable Intelligent Surfaces in Next-Generation Wireless Systems
Reconfigurable intelligent surface RIS technology offers significant promise in enhancing wireless communication systems, but its dual-use potential also introduces substantial security risks. This survey explores the security implications of RIS in next-generation wireless networks. We first...
EUVD-2019-7407
Malware in sbrugna...
EUVD-2019-9548
Malware in sbrugna...
EUVD-2019-6640
Malware in sbrugna...
EUVD-2020-5192
Malware in sbrugna...
EUVD-2013-0208
Malware in sbrugna...
EUVD-2020-19694
Malware in sbrugna...