January 17, 2024 at 10:36AM The ‘LeftoverLocals’ vulnerability affects GPUs from AMD, Apple, Qualcomm, and Imagination Technologies, allowing data retrieval from local memory. Discovered by Trail of Bits researchers Tyler Sorensen and Heidy Khlaaf, it exploits incomplete memory isolation in GPU frameworks, enabling unauthorized data access. Mitigation efforts are underway, including patching and recommending automatic … Read more
January 17, 2024 at 08:30AM Researchers discovered a new attack method, LeftoverLocals (CVE-2023-4969), exploiting a GPU vulnerability to access sensitive data from AI and other applications. LeftoverLocals can affect Apple, AMD, Qualcomm, and Imagination Technologies GPUs. Qualcomm and Apple are releasing patches, while AMD plans mitigations in March 2024. The vulnerability allows local attackers to … Read more
December 6, 2023 at 10:48AM iVerify, emerging from Trail of Bits as a seed-stage startup, introduces a platform targeting iOS and Android zero-day threats, focusing on combating mercenary spyware. Source: SecurityWeek. Takeaways from the meeting: 1. Company Profile: iVerify is a seed-stage startup. 2. Origin: The company has been spun out of Trail of Bits. … Read more