Modern Intel and Arm CPUs expose cryptographic data to timing attacks, Eric Biggers, a software engineer at Google on the Platform Encryption Team, has highlighted in a series of discussions on mailing lists for the past months. Timing attacks against cryptography algorithms were discovered in the mid-90s and were proven practically at the start of …
Intel
Researchers from CrowdStrike say that hackers are actively exploiting a seven-year-old improper input validation vulnerability in the Intel Ethernet diagnostics driver for Windows. The attackers are using the flaw to deploy a malicious kernel driver. Note The exploit requires administrative access to the system, often accomplished by a combination of credential capture (to include OTP …
Updated on 2022-10-10: Intel Acknowledges Alder Lake BIOS Leak In a statement to Tom’s Hardware, Intel acknowledged a data leak that exposed Unified Extensible Firmware Interface (UEFI) code source code for its Alder Lake CPUs. Intel does not believe the leaked information exposes any new vulnerabilities, but does encourage researchers to report any issues they …
