Memory Safety is Key to Preventing Hardware Hacks

August 9, 2024 at 08:33AM The 2018 Spectre and Meltdown vulnerabilities exposed computer memory as a target for hackers to inject code and steal data. To address this, Microsoft is transitioning system applications to the Rust programming language for memory safety, while chip makers established the CHERI Alliance to create secure hardware architecture. Challenges include … Read more

Vulnerabilities in Eclipse ThreadX Could Lead to Code Execution

May 29, 2024 at 11:00AM Humanativa Group identified security vulnerabilities in Eclipse ThreadX, previously known as Azure RTOS. Marco Ivaldi found issues, including memory corruption and DoS risk, from research of publicly available source code. The flaws were reported to Microsoft and Eclipse Foundation and addressed in Eclipse ThreadX version 6.4.0, with additional bugs to … Read more