Discord Server Red Security Twitter Donation to Red Security Red Security Youtube Channel Red Security Tumblr Profile
Login or Register to Hide ads and Accessing all features on the forum

News 

Microsoft and Google Reveal New Spectre Attack

0 Replies, 1389 Views

Recently discovered by researchers at Microsoft and Google, two new versions of Spectre attack that affects the processors by AMD, ARM, IBM, and Intel. This new flaw, being named SpectreNG is related to Meltdown and Spectre which were discovered early last year. These flaws were discovered by Google and Microsoft researchers independently and were named Variant 3a and 4.
  • Variant 1: bounds check bypass (CVE-2017-5753) aka Spectre v1

  • Variant 2: branch target injection (CVE-2017-5715) aka Spectre v2

  • Variant 3: rogue data cache load (CVE-2017-5754) aka Meltdown

  • [b]Variant 3a: rogue system register read (CVE-2018-3640)[/b]

  • [b]Variant 4: speculative store bypass (CVE-2018-3639) aka SpectreNG[/b]
RedHat had this to say about SpectreNG:

“…relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor’s data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks.”

“An attacker who has successfully exploited this vulnerability may be able to read privileged data across trust boundaries,”


There is also this video, to explain further:

https://youtu.be/Uv6lDgcUAC0


---Sh7nk-Z0id
01001001 00100000 01000001 01001101 00100000 01011010 01001111 01000100 01001001 01000001 01000011

Possibly Related Threads…
Thread Author Replies Views Last Post
Star News Update Windows 10 to patch critical vulnerability in Microsoft store games News 0 1,666 11-06-2020, 04:22 AM
Last Post: News
Star News Google Project Zero Discloses Nasty Windows 0-Day Security Exploit Already In The Wi News 0 1,723 11-01-2020, 06:12 AM
Last Post: News
Star News Google warns of security holes in other vendors’ Android phones News 0 1,434 10-05-2020, 09:13 AM
Last Post: News
Star News OAuth Consent Phishing Ramps Up with Microsoft Office 365 Attacks News 1 2,390 10-01-2020, 06:40 PM
Last Post: Mr.Kurd
Star News Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution - CXSecu News 0 1,473 09-18-2020, 08:12 AM
Last Post: News
Star News Four More Bugs Patched in Microsoft’s Azure Sphere IoT Platform News 0 1,495 08-26-2020, 03:41 AM
Last Post: News
Star News Google Adsense stopped working!!! Mr.Kurd 0 1,553 08-11-2020, 10:56 PM
Last Post: Mr.Kurd
Star News Google: Eleven zero-days detected in the wild in the first half of 2020 Mr.Kurd 0 1,578 08-02-2020, 10:49 PM
Last Post: Mr.Kurd
Big Grin News Credit-Card Skimmer Has Unlikely Target: Microsoft ASP.NET Sites Mr.Kurd 0 1,540 07-08-2020, 10:13 AM
Last Post: Mr.Kurd
Shocked News Cloudflare dumps Google's reCAPTCHA, moves to hCaptcha as free ride ends Mr.Kurd 0 1,893 04-09-2020, 08:55 AM
Last Post: Mr.Kurd



Users browsing this thread: 1 Guest(s)