-
Optical Side-Channel Probing of the Internal Configuration Access Port (ICAP) on AMD 7-Series FPGAs from different perspectives.
Ref – AMD ID: AMD-SB-8034 Preface: AMD’s original EPYC naming convention used the second digit of the model number to indicate the product generation. For example: EPYC 7001 Series: 1st Gen (Naples) EPYC 7002 Series: 2nd Gen (Rome) EPYC 7003 Series: 3rd Gen (Milan) However, starting with the 4th Generation (Genoa/Bergamo), AMD changed the prefix…
-
“CVE-2026-61750, CVE-2026-61751, CVE-2026-61752 and 25 Identical description of CVEs (from CVE-2026-61754 to CVE-2026-61779) : NVIDIA Megatron Bridge…”
First release date: 2nd Sep 2026 (official) Preface: Because installing these tightly coupled dependencies (like CUDA, PyTorch, NCCL, and cuDNN) manually can be error-prone, NVIDIA recommends deploying Megatron Bridge via their pre-configured Docker containers, which ship with the exact pinned CUDA and driver environments required out of the box. Background: The NVIDIA Megatron Bridge belongs…
-
CVE-2026-71257: Apache Wicket File Upload Bypass (2nd Sep 2026)
Preface: To mitigate this without code upgrades, teams must enforce strict multi-part file size configurations at the underlying application server/framework layer (such as setting spring[.]servlet[.]multipart[.]max-file-size in Spring Boot) rather than relying on application framework variables. Background: Modern enterprise Java applications increasingly leverage Large Language Models (LLMs) to provide automated features such as intelligent text parsing,…
-
CVE-2026-80725: Allows unauthorized protocols to bypass the maximum 64KB legacy packet size limit. (1st Sep 2026)
Preface: Modern high-performance network stacks, particularly those in Linux-based CDN edge routing fabrics, utilize Generic Receive Offload (GRO) for GRE traffic. In fact, GRO is essential for handling GRE-encapsulated DDoS or DSR traffic at line-rate speeds (such as 10Gbps, 40Gbps, or 100Gbps) without completely exhausting the host’s CPU. Background: Without GRO, a Linux server handling…
-
CVE-2026-24262 and CVE-2026-24263 specifically address out-of-bounds writes in the DGX Spark system firmware. Design weakness fixed on 25th Aug 2025.
Preface: When running workloads like Apache Spark using CUDA acceleration on an NVIDIA DGX Spark (powered by the GB10 Grace Blackwell Superchip), the performance improvement over a top-grade Intel or AMD CPU desktop is massive—often ranging from 3x to over 20x faster, depending on the exact task. Background: The design goal of the Nvidia DGX…
-
Regarding CVE-2026-65083, CVE-2026-65092, and CVE-2026-65093 related to NVIDIA OpenShell Linux Sandbox and NVIDIA NEMOCLAW (28th Aug 2026)
Preface: If a sandbox platform evaluates an L7 policy (such as inspecting HTTP methods or URL paths), it must actively recognize the traffic as HTTP/REST. If an attacker wraps a REST payload inside an uninspected protocol, encrypts it via custom TLS tunnels, or forces a raw TCP connection, the L7 relay often becomes blind. Many…
-
My thoughts on NVIDIA Rowhammer security bulletin released on August 25, 2026.
Preface: The classic open-source code used to test Rowhammer (including verifying whether ECC can completely block it) primarily comes from Google’s Project Zero, CMU’s Safari Lab, and various chip security research teams. Background: The real culprit is density: The underlying vulnerability of Rowhammer is caused by physical electrical leakage between adjacent memory rows. As manufacturing…
-
CVE-2026-59568: Several vulnerabilities in the affected version of Zscaler Client Connector have been fixed.
(Publication date of this article: August 26, 2026) Preface: While a VPN tunnel safely encrypts data from your device to the endpoint, it acts like a wide-open pipe. If malware infects your laptop, it can travel through that encrypted tunnel straight to your company’s core data center. Zscaler inspects all traffic in real-time within its…
-
Point of view on the remediation of CVE-2026-74724 – Linux kernel ipvs module (25-08-2026)
Preface: Today, I want to walk you through a critical vulnerability rooted deep within the Linux kernel networking stack: CVE-2026-74724, and discuss how it impacts modern cloud-native environments. Background: As we know, when a Kubernetes cluster scales, the default iptables backend suffers from severe performance degradation due to its O(n) sequential rule matching. To handle…
-
CVE-2026-24183 and CVE-2026-24184: About NVIDIA Cumulus Linux (24th Aug 2026)
Preface: About 26 years ago, mainframe computers—especially the IBM S/390—installed FICON switches with optical fiber connections to interconnect with host nodes. As time went by, the design of supercomputers relied more heavily on Linux-based HPC (High-Performance Computing) clusters. Nvidia’s CUDA tools empowered traditional 64-bit instruction sets (which favor sequential processing) to extend into GPU multiprocessing…