https://community.isc2.org/t5/Tech-Talk/Intel-CPUs-impacted-by-Zombieload-attack/m-p/22327#M1284 <P>Researchers detailed a new Microarchitectural Data Sampling (MDS) attack against Intel CPUs.&nbsp;<SPAN><STRONG>Zombieload</STRONG>, much like&nbsp;Meltdown, Spectre, and Foreshadow takes advantage of the speculative execution process.Several YouTube demos [<A href="https://www.youtube.com/watch?v=UV9GDcOWeeI" target="_blank" rel="noopener noreferrer">1</A>,&nbsp;<A href="https://www.youtube.com/watch?v=KAgoDQmod1Y" target="_blank" rel="noopener noreferrer">2</A>,&nbsp;<A href="https://www.youtube.com/watch?v=JXPebaGY8RA" target="_blank" rel="noopener noreferrer">3</A>] showed just how deadly MDS attacks can be, with researchers employing in one case&nbsp;<A href="https://zombieloadattack.com/public/videos/demo_720.mp4" target="_blank" rel="noopener noreferrer">a Zombieload attack to monitor websites</A>&nbsp;that a user was visiting using a privacy-protecting Tor Browser running inside a virtual machine. For the paper and much more info visit&nbsp;zombieloadattack.com</SPAN></P><P>&nbsp;</P><P><SPAN>Here is the official response from Intel <A href="https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html" target="_blank">https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html</A></SPAN></P><P>&nbsp;</P> Mon, 09 Oct 2023 09:12:28 GMT AppDefects 2023-10-09T09:12:28Z https://community.isc2.org/t5/Tech-Talk/Intel-CPUs-impacted-by-Zombieload-attack/m-p/22327#M1284 <P>Researchers detailed a new Microarchitectural Data Sampling (MDS) attack against Intel CPUs.&nbsp;<SPAN><STRONG>Zombieload</STRONG>, much like&nbsp;Meltdown, Spectre, and Foreshadow takes advantage of the speculative execution process.Several YouTube demos [<A href="https://www.youtube.com/watch?v=UV9GDcOWeeI" target="_blank" rel="noopener noreferrer">1</A>,&nbsp;<A href="https://www.youtube.com/watch?v=KAgoDQmod1Y" target="_blank" rel="noopener noreferrer">2</A>,&nbsp;<A href="https://www.youtube.com/watch?v=JXPebaGY8RA" target="_blank" rel="noopener noreferrer">3</A>] showed just how deadly MDS attacks can be, with researchers employing in one case&nbsp;<A href="https://zombieloadattack.com/public/videos/demo_720.mp4" target="_blank" rel="noopener noreferrer">a Zombieload attack to monitor websites</A>&nbsp;that a user was visiting using a privacy-protecting Tor Browser running inside a virtual machine. For the paper and much more info visit&nbsp;zombieloadattack.com</SPAN></P><P>&nbsp;</P><P><SPAN>Here is the official response from Intel <A href="https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html" target="_blank">https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html</A></SPAN></P><P>&nbsp;</P> Mon, 09 Oct 2023 09:12:28 GMT https://community.isc2.org/t5/Tech-Talk/Intel-CPUs-impacted-by-Zombieload-attack/m-p/22327#M1284 AppDefects 2023-10-09T09:12:28Z https://community.isc2.org/t5/Tech-Talk/Intel-CPUs-impacted-by-Zombieload-attack/m-p/22335#M1285 <P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="_106964074_f339f6c2-0722-48eb-ac02-9177c7bdd162" style="width: 936px;"><img src="https://community.isc2.org/t5/image/serverpage/image-id/3218i113A6B2161204019/image-size/large?v=v2&amp;px=999" role="button" title="_106964074_f339f6c2-0722-48eb-ac02-9177c7bdd162" alt="_106964074_f339f6c2-0722-48eb-ac02-9177c7bdd162" /></span></P><P>&nbsp;</P><P>It's rather ironic that the drive to make faster CPUs, by putting in multiple cores, is what allowed all these "speculative processing" attacks--which ultimately resulted in "fixes" that are slowing down processing centres ...</P> Wed, 15 May 2019 18:26:48 GMT https://community.isc2.org/t5/Tech-Talk/Intel-CPUs-impacted-by-Zombieload-attack/m-p/22335#M1285 rslade 2019-05-15T18:26:48Z