2 critical vulnerabilities found in Intel & ARM chips allows attackers steal data from the memory of running apps, such as data from password managers, browsers, emails,etc. Researchers who discovered the vulnerabilities, dubbed “Meltdown” & “Spectre,” said that “almost every system,” since 1995, including computers & phones, was affected by the bug.
Google’s Security team has explained how it plans to tackle the chip vulnerability of their Google Cloud customers. It also indicated the ‘Project Zero’ team had discovered this vulnerability “last year”.
The team said it had informed the chip makers of the issue, which is caused by a process known as “speculative execution.” This is an advanced technique that enables the chip to essentially guess what instructions might logically be coming next to speed up execution. Unfortunately, that capability is vulnerable to malicious actors who could access critical information stored in memory, including encryption keys and
passwords.
http://news.google.com Jan 3, 2018
Google’s Project Zero details CPU security flaw as well as patches for Android, Chrome, more9to5GoogleOver the past 24 hours, the tech industry has been rocked by a wide-ranging CPU vulnerability. Discovered by Google’s Project Zero securit …
Read more …
http://news.google.com Jan 3, 2018
Google today revealed that Project Zero researcher Jann Horn mid-last year had uncovered “serious security flaws caused by ‘speculative execution’, a technique used by most modern processors to …
Read more …
http://news.google.com Jan 4, 2018
Google programmer Jann Horn of Project Zero was one of the researchers who discovered the flaws. In a blog post he said his group alerted chipmakers to the issues in June. Since last fall, se …
Read more …
http://news.google.com Jan 4, 2018
HACKERS could steal information from millions of desktop computers, laptops, or even tablet computers thanks to unprecedented security flaws discovered in computer chips d …
Read more …
•Share This•
