Researchers Find Seven New Meltdown and Spectre Attacks
And they keep on coming, no less than Seven new Meltdown and Spectre attacks affecting AMD, ARM, and Intel CPUs were revealed by researchers this week. These include Meltdown-BR, which exploits an x86 bound instruction on Intel and AMD processors, and Meltdown-PK, which bypasses memory protection keys on Intel CPUs. ARM and Intel have already acknowledged the researchers' findings.
Researchers say they've discovered the seven new CPU attacks while performing "a sound and extensible systematization of transient execution attacks" -- a catch-all term the research team used to describe attacks on the various internal mechanisms that a CPU uses to process data, such as the speculative execution process, the CPU's internal caches, and other internal execution stages. The team, which partly consists of people who were already involved in the 'original' Specter / Meltdown research, has published a paper (pdf) in which it explains the new vulnerabilities.
There are two new Meltdown bugs, the other five are Specter variants. The research team says they've successfully demonstrated all seven attacks with proof-of-concept code. Experiments to confirm six other Meltdown-attacks did not succeed, according to a graph published by researchers.
Researchers successfully bypass hardware encryption in Samsung and Crucial SSDs - 11/06/2018 10:52 AM
Researchers from the Netherlands discovered several vulnerabilities in various SSDs from Crucial and Samsung. The embedded hardware encryption can be bypassed. ...
Researchers find uefi rootkit that is actively being abused - 09/28/2018 08:36 AM
ESET researchers have shown that the Sednit operators used different components of the LoJax malware to target a few government organizations in the Balkans as well as in Central and Eastern Europe. T...
NVIDIA CEO Hands out Special CEO Edition Titan V GPUs to AI Researchers - 06/21/2018 04:21 PM
At the Computer Vision and Pattern Recognition conference in Salt Lake City Wednesday, NVIDIA’s Jensen Huang told top AI researchers he wanted to help them achieve a very different kind of p...
Researchers reveal Variant 4 of Spectre vulnerability - 05/22/2018 05:38 PM
As discussed a few weeks ago, a new Spectre vulnerability has been shared and made public today. Earlier on it was reported that there are eight new vulnerabilities, grouped and named as Spectre-ng...
Researcher Demonstrates USB Stick That Can BSOD Any Windows 10 Device Even If Locked - 05/03/2018 07:28 AM
Microsoft has a security issue that affects both Windows 7 and Windows 10 operating systems. The code exploits a vulnerability in Microsoft's handling of NTFS filesystem images and was discovered by...
Senior Member
Posts: 13119
Joined: 2014-07-21
These issues won't disappear in the years to come....
Senior Member
Posts: 11280
Joined: 2004-05-10
Yep, will always be something new. Even if spectre/meltdown resolved, something else will come along.
Senior Member
Posts: 1687
Joined: 2018-08-29
Well, at least they're brand-agnostic

Senior Member
Posts: 13119
Joined: 2014-07-21
Exactly. And Meltdown / Spetre are also here to stay as long as speculative execution / prefetching of certain things is a thing.
Senior Member
Posts: 333
Joined: 2016-09-28
No no no no xD