NEW: A newly revealed flaw in multiple generations of Intel chips was just revealed. While the vulnerability, dubbed 'Downfall,' doesn't impact the current generation of Intel chips, it does affect many chips Intel produced since 2015 and still on sale now
This latest vulnerability, dubbed Downfall by Daniel Moghimi, the Google researcher who discovered it, occurs in chip code that can use an instruction known as Gather to access scattered data more quickly in memory. Intel refers to the flaw as Gather Data Sampling after one of the techniques Moghimi developed to exploit the vulnerability. Moghimi will present his findings at the Black Hat security conference in Las Vegas on Wednesday.
The vulnerability affects the Skylake chip family, which Intel produced from 2015 to 2019; the Tiger Lake family, which debuted in 2020 and will discontinue early next year; and the Ice Lake family, which debuted in 2019 and was largely discontinued in 2021. Intel's current generation chips—including those in the Alder Lake, Raptor Lake, and Sapphire Rapids families—are not affected, because attempts to exploit the vulnerability would be blocked by defenses Intel has added recently.
“Over the past few years, the process with Intel has improved, but broadly in the hardware industry we need agility in how we address and respond to these kinds of issues,” Moghimi says. “Companies need to be able to respond faster and speed up the process of issuing firmware fixes, microcode fixes, because waiting one year is a big window when anyone else could find and exploit this.”
Intel says that it would be “complex” and difficult to carry out Downfall attacks in real-world conditions, but Moghimi emphasizes that it took him only a few weeks to develop proofs of concept for the attack. And he says that relative to other speculative execution vulnerabilities and related bugs, Downfall would be one of the more doable flaws for a motivated and well-resourced attacker to exploit.
Österreich Neuesten Nachrichten, Österreich Schlagzeilen
Similar News:Sie können auch ähnliche Nachrichten wie diese lesen, die wir aus anderen Nachrichtenquellen gesammelt haben.
New season, new drama, new squad on 'LA Rams Cheerleaders: Making the Squad'Who has what it takes to become an NFL cheerleader? 🐏💙📣 'LA Rams Cheerleaders: Making the Squad' shows you the ups and downs and how dreams come true. LARamsCheer The first episode of the three-part series premieres TONIGHT at 6:30 p.m. on ABC7!
Weiterlesen »
New artificial intelligence model can steal passwords and data by listening to keystrokesResearchers from Cornell University have developed a deep learning model that can record and steal users' data by listening to their keystrokes. This poses a significant threat to privacy and highlights the latest AI threat.
Weiterlesen »
A New AI-Driven Cyberattack Can Steal Your Data Just By Listening to You TypeResearchers have discovered a new cyberattack that can steal data by listening to the sound of keystrokes. While eavesdropping on keystrokes is not new, the integration of AI capabilities makes this method more effective at pilfering data. The main concern is that hackers could use this technique to obtain passwords and online credentials.
Weiterlesen »
Nvidia's stock slips on introduction of new AI data-center CPU+GPU chipNvidia Corp. responds to rival AMD's lead AI data-center product with the introduction of a new CPU+GPU chip, causing a slip in Nvidia's stock.
Weiterlesen »
How Yellow’s Downfall Is Rippling Through the EconomyThe collapse of one of America’s largest trucking companies is reverberating across the economy, from domestic shipping and real-estate markets to Wall Street
Weiterlesen »
Pac-12's Downfall: Failing to Adapt to Changing Media LandscapeThe Pac-12 conference's revenue heavily relied on media rights, NCAA conference distributions, and bowl games. However, the conference failed to adjust to the evolving media landscape, resulting in a significant decline in revenue. In 2012, media accounted for 19% of the conference's revenue, but by 2022, it had increased to 35%, surpassing ticket sales and donor contributions combined.
Weiterlesen »