Chipmaker Patch Tuesday: Intel Publishes 44 and AMD Publishes 8 New Advisories

November 13, 2024 at 08:03AM Intel and AMD released November 2024 Patch Tuesday advisories, addressing newly identified vulnerabilities in their products. Intel issued 44 advisories, while AMD provided 8. This update serves to inform customers about necessary security measures for their devices. **Meeting Takeaways:** 1. **Intel Security Advisories**: Intel has released 44 new security advisories … Read more

New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors

October 29, 2024 at 02:33AM Research from ETH Zürich reveals that AMD and Intel processors remain vulnerable to speculative execution attacks, despite previous mitigations. A microcode bug allows attackers to bypass the Indirect Branch Predictor Barrier (IBPB), enabling unauthorized memory leaks. Intel has issued patches, while AMD tracks its variant of the vulnerability. **Meeting Takeaways … Read more

Intel robustly refutes China’s accusations it bakes in NSA backdoors

October 18, 2024 at 01:40AM Intel has dismissed Chinese claims from the Cybersecurity Association of China that its chips contain NSA-directed security backdoors and have vulnerabilities. The allegations triggered calls for a cybersecurity review in China. The tensions between the US and China over cybersecurity are rising, with accusations from both sides intensifying. ### Meeting … Read more

Intel and Lenovo BMCs Contain Unpatched Lighttpd Server Flaw

April 15, 2024 at 01:03PM A security flaw in the Lighttpd web server used in BMCs, unpatched by Intel and Lenovo, poses a risk of exfiltrating sensitive data. The absence of prompt security information prevents proper handling of the fixes down firmware and software supply chains. Out-of-bounds read vulnerabilities in susceptible versions of Lighttpd remain … Read more

Intel and Lenovo servers impacted by 6-year-old BMC flaw

April 11, 2024 at 12:52PM A 6-year-old vulnerability in Lighttpd web server used in Baseboard Management Controllers, overlooked by vendors like Intel and Lenovo, could lead to memory exfiltration, bypassing protection mechanisms. Binarly discovered a heap out-of-bounds read vulnerability and vendors missed the fix, leading to a massive number of vulnerable devices, with impacted models … Read more

Chipmaker Patch Tuesday: Intel, AMD Address New Microarchitectural Vulnerabilities

March 13, 2024 at 12:51PM Intel and AMD released 10 new security advisories on Patch Tuesday. Intel’s advisories include 8 new issues, with 2 high-severity vulnerabilities impacting BIOS firmware and 4th Generation Xeon processors. They also address medium and low-severity vulnerabilities affecting processors. The company has released microcode updates to mitigate these issues. AMD’s advisories … Read more

Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities

February 14, 2024 at 09:03AM AMD and Intel released patches for over 100 vulnerabilities, including 21 high-severity vulnerabilities, in their processors and software products. AMD addressed flaws in embedded processors, SEV firmware, and UltraScale and UltraScale+ FPGA series devices. Intel issued patches for various drivers, device firmware, Ethernet tools, and software products, resolving a total … Read more

Microsoft testing Windows 11 USB 80Gbps support, Copilot on login

January 11, 2024 at 02:41PM Microsoft is currently testing USB4 Version 2.0 support in Windows 11, allowing up to 80Gbps transfer speeds over USB Type-C cables. This latest USB standard is essential for higher-performance displays, hubs, docks, and storage devices. The company is also testing a new Windows Copilot option and sharing improvements in the … Read more