From secret images to encryption keys. [Research Saturday]
CyberWire Daily18 Touko 2024

From secret images to encryption keys. [Research Saturday]

This week, we are joined by Hosein Yavarzadeh from the University of California San Diego, as he is discussing his work on "Pathfinder: High-Resolution Control-Flow Attacks Exploiting the Conditional Branch Predictor" This paper introduces new methods that let attackers read from and write to specific parts of high-performance CPUs, such as the path history register (PHR) and prediction history tables (PHTs). These methods allow two main types of attacks. One can reveal a program's control flow history, as shown by recovering a secret image through the libjpeg routines. The other enables detailed transient attacks, demonstrated by extracting an AES encryption key, highlighting significant security risks for these systems. The research can be found here: Graph: Growing number of threats leveraging Microsoft API

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(3760)

The Cisco root route.

The Cisco root route.

Cisco patches a maximum-severity vulnerability in its Identity Services Engine. Court documents describe AI as “an astonishing theft of unprecedented proportions.” Researchers chain vulnerabilities to...

18 Syys 28min

AI is calling the shots.

AI is calling the shots.

AI goes to war. Iranian strikes leave AWS data unrecoverable. OpenAI discloses more model misbehavior. Researchers uncover 16 Wireshark vulnerabilities. TrustSink turns Entra authentication into a pas...

17 Syys 29min

Cybercrime finds its sea legs.

Cybercrime finds its sea legs.

Officials investigate suspected cyberattacks on U.S.-bound oil tankers. Iranian operators deploy Chosen Brick surveillance malware. Ukraine cracks down on scam call centers. Researchers uncover two TP...

16 Syys 29min

Pedal to the AI metal.

Pedal to the AI metal.

The President pushes back on calls to slow AI. Microsoft lays out potential AI safety rules. Lawmakers consider the crypto Clarity Act. Florida’s Department of Highway Safety and Motor Vehicles and Ja...

15 Syys 28min

Bigfoot in the neural network.

Bigfoot in the neural network.

NSA preps a major restructuring. Anthropic’s CEO calls for an AI slowdown. China acknowledges AI risks. RubyGems got swarmed by AI agents. A maximum-severity GitLab vulnerability is under active expl...

14 Syys 27min

Space's cybersecurity policy problem. [T-Minus: Space-Cyber Briefing]

Space's cybersecurity policy problem. [T-Minus: Space-Cyber Briefing]

As space becomes increasingly connected and autonomous, effective cybersecurity policy is struggling to keep pace. Host Maria Varmazis and ⁠⁠⁠Dr. Mac McGuire sit down to discuss the limitations of c...

13 Syys 22min

A beast by any other name. [Research Saturday]

A beast by any other name. [Research Saturday]

Today we are joined by Brigid O Gorman, Senior Intelligence Analyst on Symantec Threat Hunter team, discussing their work on “GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable ...

12 Syys 23min

You might want to watch what you say.

You might want to watch what you say.

WeWorm has China’s attention. Calls for an AI slowdown continue. OpenAI calls for mandatory AI regulation. Anthropic disrupts Russian cyberespionage. The EU’s 24 hour reporting requirement goes into e...

11 Syys 29min

Suosittua kategoriassa Politiikka ja uutiset

uutiscast
vallattomat
aikalisa
politiikan-puskaradio
rss-viihde-media
ootsa-kuullut-tasta-2
rss-vaalirankkurit-podcast
rss-ootsa-kuullut-tasta
rss-voi-venaja
et-sa-noin-voi-sanoo-esittaa
rss-raha-talous-ja-politiikka
tervo-halme
otetaan-yhdet
rss-asiastudio
rikosmyytit
rss-kaikki-uusiksi
rss-ulkopoditiikkaa
rss-seksicast
rss-pinnalla
the-ulkopolitist