Page 3 - Daniel Moghimi News Today

A hardware flaw in Intel Core and Xeon CPUs lets attackers steal data from other users on the same system, including on servers that use Intel's SGX memory protections, according to a Google researcher. According to SC Magazine, Daniel Moghimi told the Black Hat 2023 security conference this week that the vulnerability, dubbed "Downfall", endangers

Intel & AMD CPUs reportedly face newly surfaced vulnerabilities codenamed Downfall & Inception, impacting the performance of several PCs.

There is a serious security flaw in billions of Intel CPUs that can let attackers can steal confidential data like passwords and encryption keys. Firmware updates can fix it, but at a potential significant performance loss.

Google researcherer Daniel Moghimi discovered the new vulnerability, dubbed Downfall. He writes that it is caused by memory optimization features in Intel processors that unintentionally reveal internal...

The fix does come with a big performance hit and an opt-out, though.

But a fix could hurt performance of Intel chips too

Several generations of Intel x86 CPUs are vulnerable to attacks leveraging the nearly decade-old Downfall flaw, which could result in the exfiltration of encryption keys and other sensitive data, CyberScoop reports.

Years of Macs use affected processors, but it's unclear if they are subject to the attack or not.

Issue has now been fixed, company says

Researchers also disclosed a separate bug called "Inception" for newer AMD CPUs.