Cybersecurity

Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel

Apr 10, 2024NewsroomHardware Security / Linux Cybersecurity researchers have disclosed what they say is the “first native Spectre v2 exploit” against the Linux kernel on Intel systems that could be exploited to read sensitive data from the memory. The exploit, called Native Branch History Injection (BHI), can be used to leak arbitrary kernel memory at […]

Cybersecurity

Novel Ahoi attacks could compromise confidential VMs

Confidential virtual machines could be breached through two different types of novel Ahoi attacks, reports SecurityWeek. Intrusions leveraging the first technique, dubbed “Heckler,” involved the targeting of hardware-based trusted execution environments running on Intel’s Trust Domain Extensions and AMD’s Secure Encrypted Virtualization-Secure Nested Paging technologies with malicious hypervisors that sought to facilitate authentication evasion and […]

Cybersecurity

Critical ‘BatBadBut’ Rust Vulnerability Exposes Windows Systems to Attacks

Apr 10, 2024NewsroomSoftware Security / Vulnerability A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks. The vulnerability, tracked as CVE-2024-24576, has a CVSS score of 10.0, indicating maximum severity. That said, it only impacts scenarios where batch files are invoked on Windows with […]

DJing

Premiere: Stefan Goldmann’s jagged, polyrhythmic grooover ‘Yantra’ | Juno Daily

Advance listen from the Berlin producer’s Alluvium LP Alluvium is the third in Berlin-based experimental producer Stefan Goldmann’s series of albums exploring the “first principles” research of metric asymmetry. Exploring new structural paths for machine rhythm in irregular metres, the album seems non-binary patterns running simultaneously, moving in and out of interlocking focus, across 12 […]