-
My thoughts on NVIDIA Rowhammer security bulletin released on August 25, 2026.
Preface: The classic open-source code used to test Rowhammer (including verifying whether ECC can completely block it) primarily comes from Google’s Project Zero, CMU’s Safari Lab, and various chip security research teams. Background: The real culprit is density: The underlying vulnerability of Rowhammer is caused by physical electrical leakage between adjacent memory rows. As manufacturing…
-
Detailed description of the AMD-SB-7061 Safe RET interrupt vulnerability.
This article was published on 10th Aug 2026 Official release date: August 4, 2026 Preface: AMD Zen 4 architecture is widely used in high-performance computing (HPC). It powers 4th Generation AMD EPYC server processors (such as Genoa, Genoa-X with 3D V-Cache) and the AMD Instinct MI300A accelerated processing unit (APU), which combine Zen 4 CPU…
-
Multi-faceted design defect analysis – CVE-2026-7849 (August 3, 2026)
Preface: “Secure by Design” is a flawless theory when studying standards like IEC 62443 or automotive-specific ISO/SAE 21434, but in reality, original equipment manufacturers (OEMs) always compromise due to Bill of Materials (BOM) and production costs. Background: • The Charging Station Side (EVSE): CVE-2026-7849 is strictly an OS Command Injection vulnerability within the Web management…
-
A more imaginative assumption on TDXRay: Microarchitectural Side-Channel Analysis of Intel TDX for Real-World Workloads (15th MAY 2026)
Preface: In these scenarios (see attached diagram), microarchitecture side-channel attacks targeting Intel TDX can directly impact and jeopardize the security of AMD accelerators. Even though the AMD Instinct APU operates on a completely different silicon package, the two architectures are fundamentally tied together by a shared software stack, device driver interface, and physical interconnect fabric.…
-
Checkmarx Jenkins AST Plugin Compromised (14th May 2026)
Preface: Jenkins’ popularity and its rich plugin ecosystem are the main reasons for integrating event monitoring tools with it. While there isn’t a single “API plugin,” Jenkins has a powerful built-in remote access API (supporting XML, JSON, and Python), which many external monitoring tools use to retrieve data. Background: With its unparalleled flexibility, vast plugin…
-
Closer Look – SIM-Farm-as-a-Service (28th Apr 2026)
Preface: A SIM box (or SIM bank) is a hardware device that houses multiple SIM cards simultaneously to facilitate VoIP-to-GSM call termination. It reroutes international VoIP calls to appear as local calls by using local prepaid SIM cards, allowing operators to bypass high international tariffs and exploit low local call rates. It is primarily used…
-
AMD ID: AMD-SB-7050: About Vector Value Injection in AMD CPUs, AMD believes that existing mitigation guidance for FPVI remains valid and covers VVI cases as well. What are your thoughts on this? (18th Mar 2026)
Background: The researchers’ paper introduces Vector Value Injection (VVI), which could allow an attacker with a deep understanding of microarchitectural behavior to inject values into vector registers during transient execution. Although they noted similarities with Floating Point Value Injection (FPVI), they reported Vector Value Injection as a new issue due to its capability to be…
-
Edge TPU (an ASIC accelerator developed by Google) – Episode 1 (23rd Feb 2026)
Preface: PyCoral is specifically a TPU processing technique. While TensorFlow Lite (TFLite) can run on a standard CPU, PyCoral is the dedicated library used to delegate those operations to the Edge TPU hardware. PyCoral API: This is a Python library specifically designed by Google to run inference on Coral Edge TPU hardware, such as the…
-
Learn more about AMD ID: AMD-SB-3042 (Control Flow Reconstruction using HPCs) [18 Feb 2026]
Preface: AMD EPYC processors are extensively used for High-Performance Computing (HPC) clusters, powering some of the world’s most advanced supercomputers. They are specifically engineered to handle compute-intensive tasks such as scientific simulations, weather forecasting, and complex molecular modelling. Background: AMD Infinity Guard is a suite of security features built directly into the silicon of the…
-
AMD ID: AMD-SB-8022 – Closer look in Optical Probing of Readback CRC Bus (13th Feb 2026)
Preface: AMD 7000 series (7-series) processors are extensively used to build High Performance Clusters (HPC). AMD provides 7-series solutions for both enterprise-grade and consumer/prosumer levels: Background: The “Readback CRC Bus” refers to the internal logic path or mechanism in FPGAs (especially AMD/Xilinx devices) used to perform readback cyclic redundancy checks. This is not a physical…