BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections

December 11, 2024 at 11:03AM Researchers from KU Leuven, University of Lubeck, and University of Birmingham introduced the BadRAM attack, utilizing $10 equipment to compromise AMD’s SEV-SNP technology by deceiving memory processors. This attack exploits rogue memory modules to manipulate memory mappings, leading to potential data integrity loss. AMD has implemented firmware updates to mitigate … Read more

Microsoft expands Recall preview to Intel and AMD Copilot+ PCs

December 6, 2024 at 02:11PM Microsoft is testing its AI-powered Recall feature on Copilot+ PCs with AMD and Intel processors, specifically for users in the Windows 11 Insider program. ### Meeting Notes Takeaways: 1. **Microsoft AI Recall Feature**: Testing is currently underway for the AI-powered Recall feature. 2. **Hardware Compatibility**: The testing is being conducted … Read more

Chipmaker Patch Tuesday: Intel Publishes 44 and AMD Publishes 8 New Advisories

November 13, 2024 at 08:03AM Intel and AMD released November 2024 Patch Tuesday advisories, addressing newly identified vulnerabilities in their products. Intel issued 44 advisories, while AMD provided 8. This update serves to inform customers about necessary security measures for their devices. **Meeting Takeaways:** 1. **Intel Security Advisories**: Intel has released 44 new security advisories … Read more

New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors

October 29, 2024 at 02:33AM Research from ETH Zürich reveals that AMD and Intel processors remain vulnerable to speculative execution attacks, despite previous mitigations. A microcode bug allows attackers to bypass the Indirect Branch Predictor Barrier (IBPB), enabling unauthorized memory leaks. Intel has issued patches, while AMD tracks its variant of the vulnerability. **Meeting Takeaways … Read more

AMD internal data reportedly offered for sale

August 26, 2024 at 12:48PM AMD’s internal communications have been breached by digital data thieves who are offering the stolen goods for sale on the dark web. The criminal groups IntelBroker and EnergyWeaponUser claimed responsibility for the break-in, offering compromised comms from various sources and sensitive information. AMD has not responded to inquiries about the … Read more

AMD Issues Updates for Silicon-Level ‘SinkClose’ Processor Flaw

August 12, 2024 at 04:42PM AMD has issued firmware updates to address a nearly two-decades-old silicon-level vulnerability in its EPYC data center processors and its Ryzen processors for PCs and embedded systems. The “SinkClose” flaw affects a component in the processor protecting System Management Mode, potentially allowing attackers to implant almost undetectable malware. AMD has … Read more

Dark-web kingpin puts ‘stolen’ internal AMD databases, source code up for sale

June 18, 2024 at 07:12PM Cyber-criminals are selling what they claim to be AMD’s internal data on the dark web, including customer databases, product specifications, financial figures, and staff information. AMD is working with law enforcement to investigate the situation. The individual responsible, known as IntelBroker, has a history of distributing stolen data from high-profile … Read more

Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vulnerabilities

March 13, 2024 at 12:51PM Intel and AMD released 10 new security advisories on Patch Tuesday. Intel’s advisories include 8 new issues, with 2 high-severity vulnerabilities impacting BIOS firmware and 4th Generation Xeon processors. They also address medium and low-severity vulnerabilities affecting processors. The company has released microcode updates to mitigate these issues. AMD’s advisories … Read more

Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities

February 14, 2024 at 09:03AM AMD and Intel released patches for over 100 vulnerabilities, including 21 high-severity vulnerabilities, in their processors and software products. AMD addressed flaws in embedded processors, SEV firmware, and UltraScale and UltraScale+ FPGA series devices. Intel issued patches for various drivers, device firmware, Ethernet tools, and software products, resolving a total … Read more

Microsoft December 2023 Patch Tuesday fixes 34 flaws, 1 zero-day

December 12, 2023 at 02:02PM Today’s December 2023 Patch Tuesday from Microsoft addresses 34 flaws, including an unpatched vulnerability in AMD CPUs. Notably, it resolves a public zero-day AMD bug and includes a total of 8 fixes for Microsoft Edge flaws. Additionally, updates from other vendors in December are detailed, along with a list of … Read more