-
Protect against the chipset vulnerabilities known as Spectre and Meltdown, but encountered problem in AMD chips
Microsoft release patch this week objectives Windows operating system mitigations to protect against the chipset vulnerabilities known as Spectre and Meltdown. A problem encountered on AMD chip after patch installed. The system not boot. Microsoft suspected that the root causes by AV software. For more details, please see below informative diagram for reference. The reference…
-
Spectre attack works on non-Intel processors – status update by Apple 8th Jan 2018
In order to avoid the effects of Spectre (CVE-2017-5753 and CVE-2017-5715), Apple announced solution (patching) to mitigate this vulnerabilities. It was surprise that the result looks different from the security analysis report findings. It looks that no significant performance slow down and not require to re-design CPU. However Apple computer address the problem this time…
-
CPU and machines not vulnerable to “meltdown and “Spectre” vulnerabilities.
The Chinese mantra “time can tell” looks like a witness to modern hardware and software development industry. As we know IBM mainframe (s390) and Sun SPARC given the feeling to the world in last decase was that they are far away from modern technologies. Even though S390 contains LPAR function allow multuple OS platform operation…
-
CVE-2017-5753,CVE-2017-5715&CVE-2017-5715 whether there is any changes?
An urgent alert announced by US Homeland security urge computer user stay alerting of CPU design bug found this month. The victim firm Intel looks provides their comments that this know issue not encountered on their product only. As a matter of fact, this is true the side channel attack on mobile devices was happened…
-
Intel CPU design hiccups – CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
Below details better than what I say thousand of words. Current status update in regards to CPU (Intel) design limitations. AMD https://www.amd.com/en/corporate/speculative-execution AMD proud of it, they did not made this mistake! Seems it is a long run in development,It is hard to tell this moment. Stay tuned. Good luck to him! ARM https://developer.arm.com/support/security-update Intel https://newsroom.intel.com/news/intel-responds-to-security-research-findings/ Microsoft https://portal.msrc.microsoft.com/en-US/eula Linux https://lkml.org/lkml/2017/11/22/956…
-
Processor Bug harm virtual machine and cloud computing platform
Headline news today told the world of chip design hiccups given by CPU manufacturer (Intel). You are easy to do a google search to find out the details. During the first announcement of virtual machine design concept come to the world, security expert foreseen that a multiple vulnerabilities will be happen in future. It looks…
-
VMware VMSA-2018-0001 – CVE-2017-15548,CVE-2017-15549,CVE-2017-15550
A runner who run faster achieve the goal, he is the winner. We just go to first week of 2018. The VMware faster than Microsoft announce their critical vulnerability on 2nd Jan 2018 (Advisory ID: VMSA-2018-0001). Quote: “A remote unauthenticated malicious user can potentially bypass application authentication and gain unauthorized root access to the affected…
-
Renaissance – Cyber attack transformation
Preface: Renaissance – The period of this revival, roughly the 14th through the 16th century, marking the transition from medieval to modern times. Background: The virus and malware wreak havoc in information technology environment in past decade especially on Microsoft windows operating system platform. It looks that a transformation was happened since smartphone leading the…
-
Forever 21 retail shop data breach – official announcement
Credit Card POS malware wreak havoc. Read the headline news notice that Forever 21 confirm that data breach occurred. The breach exposed card numbers, expiration dates and verification codes, but not cardholder names. Regarding to the information reported by engadget.com. Chipotle and GameStop suffered similar breaches this year (2017). Hotel giant HEI similar data breach…
-
Say Goodbye to 2017 cyber incidents
We are going to say goodbye to 2017. What is your expectation in the new year? Cyber World activities especially cyber attacks looks intensive this year. Perhaps we cannot imagine ransomware threat which contain powerful destruction power last decade.The crypto worm (WANNACRY) break the Cyber incident world records which suspended huge volume of workstations and…