News Microsoft and Google Reveal New Spectre Attack - Printable Version +- Red Security (https://redsecurity.info/cc) +-- Forum: General (https://redsecurity.info/cc/forumdisplay.php?fid=1) +--- Forum: News (https://redsecurity.info/cc/forumdisplay.php?fid=4) +--- Thread: News Microsoft and Google Reveal New Spectre Attack (/showthread.php?tid=564) |
Microsoft and Google Reveal New Spectre Attack - Mad-Architect - 05-23-2018 Recently discovered by researchers at Microsoft and Google, two new versions of Spectre attack that affects the processors by AMD, ARM, IBM, and Intel. This new flaw, being named SpectreNG is related to Meltdown and Spectre which were discovered early last year. These flaws were discovered by Google and Microsoft researchers independently and were named Variant 3a and 4.
“…relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor’s data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks.” “An attacker who has successfully exploited this vulnerability may be able to read privileged data across trust boundaries,” There is also this video, to explain further: https://youtu.be/Uv6lDgcUAC0 ---Sh7nk-Z0id |