With the volume of security advisories set to grow, it's important to know what assets are not at risk from vulnerability
While Apple pays well, researchers at Black Hat argue there is a clear lack of transparency on when, or even if, reported vulnerabilities will be fixed
Summary The NPU deviceâs kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an index into a function pointer array. The user provided values can exceed the boundaries of the legitimate array and might cause user controlled values to be called as function poin...
With lights and beds controlled by Wi-Fi, what could go wrong? Apparently, a lot.
Cops arrest son of fatally stabbed Cyberwolf co-founder after his DNA is found on alleged murder weapon
Summary The NPU deviceâs kernel driver implements a custom mmap handler that exposes trusted kernel data to user space. These exposed structures contain sensitive data, including kernel pointers, which can be controlled by a user process. The content of these structures is inherently trusted by the...
Black Hat keynoter warns that supply-chain attackers can do much more damage and advocates for platform vendors to do more
Video-conferencing company drops millions to settle class action claiming it violated usersâ privacy rights
Summary Due to a bug in the way mappings are closed it is possible to free a kmallocated memory chunk arbitrary times. This vulnerability can be used to craft a use after free scenario against any kernel structure that is allocated from the kmalloc-64 cache. There is rich public literature on how su...
Efforts to retry academic under China Initiative branded âracial profilingâ by groups representing Asians in the US
There was a surprising decline in personal data breach reports to the ICO in FY 20/21 despite rising attacks and breaches.
Summary The NPU deviceâs kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an offset to retrieve a kernel structure. Fields of the structure are written with user provided values. A malicious actor can use this vulnerability to overwrite kernel memory with c...
Researchers trace mega-leak to little known marketing company
Ministry of Defence teams up with HackerOne on first-of-its-kind initiative
Summary In a previous advisory we disclosed multiple vulnerabilities within the NPU deviceâs mmap handler and discussed how it exposes sensitive kernel data. This advisory focuses on the implementation errors in the same handler. The mapping function ignores the requested size parameter and fails to...
Report finds little progress over the past decade
Samsungâs neural processing framework has received a lot of attention from the security community since its introduction. Hardware isolation vulnerabilities have been demonstrated, both on the NPU and DSP cores (1, 2), that could be used to compromise the kernel. The surrounding kernel code was also...
Summary During the regular boot sequence, Huaweiâs BootROM initializes the UFS hardware and the crypto engine in order to load and verify the next stage bootloader image from flash. However, when run in download mode, which maybe used for factory flashing and repair purposes, a connected host can co...
Le Garante privacy italien a infligé des amendes totalisant 400 000 euros à LazioCrea, la Regione Lazio et l'Asl Roma 3 pour ne pas avoir mis en place des mesures de sécurité adéquates, permettant ainsi une attaque ransomware sur les systÚmes informatiques de la région le 30 juillet 2021, en pleine...
In this very short post I wanna talk mention The Silver Searcher, which I just learned about a few weeks ago.
In the past I have written quite a bit about the importance of credential hunting for your organization and some cool built-in operating system indexing features that can be used as well.
Of...