CVE-2020-12309

Insufficiently protected credentialsin subsystem in some IntelR Client SSDs and some IntelR Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2020-12309

Intel has published an advisory for CVE-2020-12309 noting insufficiently protected credentials in the subsystem of several Intel SSDs that could allow information disclosure with physical access. The Red Hat security note and Intel advisory enumerate affected products and required mitigations via...

Product update: Virtuozzo Hybrid Server 7.0 Update 14 Hotfix 1 (7.0.14-257)

The Hotfix 1 for Virtuozzo Hybrid Server 7.0 Update 14 provides stability and usability bug fixes. Vulnerability id: PSBM-105022 Unable to live-migrate VMs with dirty bitmaps on Virtuozzo Storage. Vulnerability id: PSBM-104631, PSBM-104632 CS journals to be placed on SSDs are now properly handled...

Design/Logic Flaw

Insufficient control flow management in firmware for some IntelR Data Center SSDs may allow a privileged user to potentially enable information disclosure via local access...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 9 (VA MN: 7.0.2-645, VA Agent: 7.0.2-364)

Hotfix 9 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-35779 Virtuozzo Automator warns about low disk space on SSDs with storage cache and journals. Vulnerability id: PVA-37393 VA agent can fully load MDS on nodes with lots of containers on Virtuozzo...

An Elon Musk Imposter, Foreign Malware Samples, and More Security News This Week

Compromised crypto, flawed SSDs, and more of the week's top security news...

Samsung, Crucial’s Flawed Storage Drive Encryption Leaves Data Exposed

Self-encrypting solid-state storage drives from Samsung and Crucial are open to tampering that would allow an attacker with physical access to harvest their data without knowing the user’s password, researchers have discovered. Researchers at Radboud University in the Netherlands found that it’s...

Security of Solid-State-Drive Encryption

Interesting research: "Self-encrypting deception: weaknesses in the encryption of solid state drives SSDs": Abstract: We have analyzed the hardware full-disk encryption of several SSDs by reverse engineering their firmware. In theory, the security guarantees offered by hardware encryption are...

Locked Data on Intel 5400s and 6000p Solid State Drives Could be Corrupted by Malware - us

Lenovo Security Advisory: LEN-15217 Potential Impact: Drive data could be corrupted by malware even when locked Severity: Medium Scope of Impact: Industry wide Summary Description: A vulnerability has been reported by Intel, a manufacturer of Solid State Drives SSDs, with the Intel models 5400s a...

Data on Toshiba Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility - Lenovo Support US

No description provided...

Data on SanDisk Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility

Lenovo Security Advisory: LEN-5595 Potential Impact: Drive data may be able to be recovered after running the secure erase utility Severity:Medium Scope of Impact: Lenovo Summary Description: SanDisk’s firmware used to erase the data on these SSDs did not meet Lenovo’s specifications and it was...

Updated kernel-tmb packages fix security vulnerabilities and bugs

Updated kernel-tmb fixes security, critical data corruption and pdata loss issues This kernel-tmb update is based on upstream -longterm 3.14.43 and fixes a security issue, and critical data corruption and data loss issues: drivers/vhost/scsi.c: potential memory corruption CVE-2015-4036 ext4...

Plextor Site Hacked by ViciOuS Hacker After Product Launch !

Plextor has been hacked. Just days after announcing a new series of solid state drives, the digital storage company has found its U.S. site defaced by a digital vandal calling himself "ViciOuS". The altered page declares "Hacked by ViciOuS", and includes a shout-out to fellow hackers, a link to...