Security researchers from the University of Illinois at Urbana-Champaign are raising the alarm over a new type of side-channel attack targeting Intel processors, which can enable threat actors to steal passwords, encryption keys and other types of sensitive information, according to Threatpost. A key feature of this new attack is its targeting of the CPU ring interconnect feature in modern Intel CPUs, including the Skylake and Coffee Lake processor families, instead of deploying traditional methods such as sharing memory and cache sets. The researchers said this new channel of attack appears difficult to perform because of the sparse information available on the ring interconnect’s functioning and architecture, and the “noisy” nature of data gathered through ring contention. According to researchers, the attack can successfully overcome some side-channel countermeasure that have been introduced previously. The researchers, who are scheduled to present their findings at USENIX Security 2021, said they were able to develop two proof-of-concept attacks, one that extracts “key bits” from vulnerable RSA and Edwards-curve Digital Signature Algorithm encryption algorithm implementations, and another that targets keystroke timing information.
Jill Aitoro leads editorial for SC Media, and content strategy for parent company CyberRisk Alliance. She 20 years of experience editing and reporting on technology, business and policy.
Potential sale of Secureworks was reported by Reuters quoting sources close to the matter to be assessed by Dell alongside Morgan Stanley and Piper Sandler, which prompted an increase in share prices for the cybersecurity firm.
More than 40% of all scam revenues have been directed to wallets that have been created during the past 12 months, the highest on record, indicating a substantial increase in new scam campaigns.
APT32's most recent attacks involved the compromise of four hosts with different Windows Registry keys and scheduled tasks that facilitated the deployment of Google Chrome cookie exfiltration, Cobalt Strike beacons, and embedded DLL payload loaders.