SecurityWeek reports that Intel Software Guard Extensions, which is integrated into certain Intel CPUs to prevent data and code exposure even in the event of system hacking, could have its DCAP attestation mechanism compromised through the novel WireTap attack that harnesses a passive DIMM interposer.
This week's technical segment is all about the T-Lora Pager from Lilygo, and really cool Meshtastic device that can also be used for some hacking tasks! In the security news: Your safe is not safe, Cisco ASA devices are under attack, VMScape, HybridPetya and UEFI attacks in the wild, Eveything is a Linux terminal, Hackers turns 30, Hosting websites...
BleepingComputer reports unmodified QEMU hypervisors underpinned by AMD Zen 1 to 5 processors and Intel Coffee Lake processors could have their cryptographic keys compromised with the new VMScape attack, which circumvents protections for Spectre vulnerabilities.
CyberScoop reports that intensified spyware attacks against iPhones have prompted Apple to introduce the new Memory Integrity Enforcement security system in its new iPhone 17 and iPhone Air devices with the A19 and A19 Pro chipsets.
In the secure news: Automakers respond to Flipper Zero attacks, More on the unconfirmed Elastic EDR 0-Day, When Secure Boot does its job too well, Crazy authenitcation bypass, Hacker ultimatums, AI Slop, Impatient hackers, Linux ISOs are malware, Attackers love drivers, Hacking Amazon's Eero, the hard way, Exploits will continue until security impr...
Rob Allen joins us to discuss the importance of security research teams, and some cool stuff they've worked on. Then, in the Security News: Flipper Zero, unlocking cars: The saga continues, The one where they stole the vulnerabilities, ESP32 Bus Pirates, AI will weaponize everything, maybe, What are in-the-wild exploits?, Docker and security bounda...
Infected USB devices have been used to compromise organizations in the U.S., Europe, Asia, Africa, and Australia with cryptomining malware related to XMRig or Zephyr as part of an attack campaign, according to Infosecurity Magazine.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
