Ofofo News’ Post

🔒🚨 Hey tech wizards! Arm just dropped a bomb on us with some juicy security news! 🚨🔒 🔍 Arm is sounding the alarm on a security vulnerability that's shaking up the Mali GPU Kernel Driver world. This bug, known as CVE-2024-4610, is causing quite a stir! 😱 🔥 Brace yourselves - this vulnerability affects products we've grown to love: - Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) - Valhall GPU Kernel Driver (all versions from r34p0 to r40p0) 🛡️ What's the risk, you ask? Well, a local non-privileged user can maneuver around GPU memory constraints, and that's never good news. Stay sharp, folks! 💪 🔮 Predictions time: With threats evolving like Pokemon, it's clear we need to beef up our defenses. Let's buckle down and secure our tech fortresses before the bad guys come knocking! 🚀 🤓 Who's ready to dive deep into this nerd maelstrom with me? Let's discuss, debate, and decode this vulnerability together! Drop your thoughts below and let's crack this code! 🤖💬 #ainews #automatorsolutions #TechGurusUnite #SecureTheFuture #ArmYourselfWithTech #CybersecurityHeroes #DataProtectionChampions #CyberSecurityAINews ----- Original Publish Date: 2024-06-11 00:21

"Microarchitectural attacks threaten the security of computer systems even in the absence of software vulnerabilities. While x86 and ARM CPUs have been extensively studied, the rising popularity of RISC-V CPUs demands a thorough examination of their microarchitectural attack surface. With the standardization of the RISC-V instruction set architecture and the announcement of support for the architecture by major processor vendors, RISC-V CPUs are on the verge of becoming ubiquitous. In this talk, we will show a systematic investigation of the microarchitectural attack surface on the first commercially-available 64-bit hardware RISC-V CPUs..." https://lnkd.in/escXsGKE

Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild. Tracked as CVE-2024-4610, the use-after-free issue impacts the following products - Bifrost GPU Kernel Driver (all versions from r34p0 to r40p0) Valhall GPU Kernel Driver (all versions from r34p0 to r40p0) https://lnkd.in/efdbB-TT #cybernews #devops #cybersecurity #arm #gpu #vulnerability

Intel Warns of 20+ Processor Vulnerabilities, Advises Firmware Updates Gist: Affecting the UEFI firmware for some server, workstation, mobile and embedded processors, including Atom, Xeon, Pentium, Celeron, and Core series products. More than half of the security holes have been assigned a ‘high severity’ rating. They can be exploited for local privilege escalation and some can allow DoS attacks or lead to information disclosure. Source: https://lnkd.in/g9fHWqGd #cybersecurity

🚨 GhostWrite is the latest vulnerability affecting T-Head’s XuanTie C910 and C920 CPUs, exposing devices to severe security risks. This hardware flaw allows attackers to bypass isolation, granting them unrestricted access to device memory and peripheral controls. Even basic protections like Docker or sandboxing aren't enough to stop this deterministic attack, which executes in microseconds. Disabling the CPU’s vector extension mitigates the risk but slashes performance by 50%. This presents a critical trade-off between security and functionality. #CyberSecurity #Vulnerability #RISC_V #HardwareSecurity #GhostWrite #Finstein

Intel Processors are suffering from a serious Chip Level Security Flaw https://lnkd.in/eVbXd8vA Intel Processors are said to be suffering from a serious chip-level security flaw which isn’t that easy to fix. And as per a post published in ‘The Register’, the fix must come from the OS level and when available could easily hit the overall performance of the processor. As per the report, the bug seems to be a fundamental design flaw that is present on all modern Intel processors produced in the past decade. Technically, the bug is said to allow user programs to track down the contents of the kernel memory which is by-default protected. So, hackers could easily […]

39 hardware vulnerabilities: A guide to the threats https://trib.al/Wev7pGT

Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs: Cybersecurity researchers have disclosed details of a now-patched security flaw in Phoenix SecureCore UEFI firmware that affects multiple families of Intel Core desktop and mobile processors. Tracked as CVE-2024-0762 (CVSS score: 7.5), the "UEFIcanhazbufferoverflow" vulnerability has been described as a case of a buffer overflow stemming from the use of an unsafe variable in the Trusted Platform https://lnkd.in/gasgqRh3

#SupplyChainSecurity issues in #firmware are a growing concern, and the impact on #CriticalInfrastructure is alarming. I recently analyzed the UP Xtreme i14 board from AAEON, a common player in advanced industrial and embedded computing platforms. Using our risk.binarly.io platform, I scanned a firmware update for the board released just two months ago (https://lnkd.in/gbkQuQ88). The results? Multiple known vulnerabilities were detected, highlighting a familiar trend of inadequate product security practices among device manufacturers in this space. Unfortunately, this is just scratching the surface of a much larger, escalating problem. #SecureByDesign #ICSsecurity #OTsecurity

When writing malware we don't want our malware to be run in sandboxes or to be analyzed manually. What do these two things have in common? They are normally preformed on a virtual machine. As such I have created this simple but expendable function which will query the GPUs name via WMIC. This name will be compared against a list of virtual machine GPU names and if its found on the list the process will kill itself. If it is a normal PC than it will still run. This method allows you to pick what VMs are affected which can be tailored on a per operation basis.