Citrix Hypervisor gets hotfix for new Reptar Intel CPU flaw

November 15, 2023 at 02:32PM Citrix has released hotfixes for two vulnerabilities affecting Citrix Hypervisor. One of the vulnerabilities, known as “Reptar,” affects Intel CPUs and can lead to system instability, crashes, or privilege escalation. The other vulnerability allows malicious code in a guest virtual machine to compromise an AMD-based host. Instructions on applying the … Read more

Critical Authentication Bypass Flaw in VMware Cloud Director Appliance

November 14, 2023 at 04:21PM VMware has released an urgent patch to fix a serious authentication bypass bug in its Cloud Director Appliance product. The vulnerability, known as CVE-2023-34060, has a severity score of 9.8 out of 10 and can be exploited by attackers with network access. The issue affects instances where the appliance has … Read more

AMD SEV OMG: Trusted execution undone by cache meddling

November 14, 2023 at 01:38PM Researchers have discovered a flaw in AMD’s SEV trusted execution environment called CacheWarp that allows attackers to manipulate cache lines and memory, potentially leading to arbitrary code execution, data exposure, or privilege escalation within a guest VM. AMD has been notified of the vulnerability and plans to issue patches to … Read more

Middle East’s 5G Acceleration May Pose Serious Security Issues

November 6, 2023 at 01:01PM In late 2023, the Middle East is projected to have around 50 million 5G connections, with 20 million in the Gulf Cooperation Council states. The COVID-19 pandemic delayed rollouts, but countries like UAE, Bahrain, and Saudi Arabia have launched 5G networks and promoted mobile packages. However, security concerns arise due … Read more