August 09, 2023

A piñata of patches for Microsoft in August

A lighter month than July with just 73 fixes on tap, but a phalanx of advisories and third-party alerts will keep sysadmins bashing away

Threat Research

August 03, 2023

Performance and security clash yet again in “Collide+Power” attack

It's a real vulnerability, but the data leakage rate can be as low as... let's just say that an IMAX-quality copy of the new "Oppenheimer" movie could take you 4 billion years to exfiltrate.

Naked Security

July 26, 2023

Zenbleed: How the quest for CPU performance could put your passwords at risk

You need to turn on a special setting to stop (the code you wrote to stop [the code you wrote to improve performance] from reducing performance) from reducing security.

Naked Security

July 31, 2018

Spectre chip weakness can be used to steal data remotely

Researchers have found a new variant of the Spectre CPU flaw that shows how attackers could steal data remotely without having to run malicious code on a local system.

Naked Security

April 12, 2018

Update now! Microsoft’s April 2018 Patch Tuesday – 65 vulns, 24 critical

Here's what you need to know about the April 2018 Patch Tuesday updates...

Naked Security

April 06, 2018

Intel won’t fix Spectre flaws in older chips

If your PC runs one of Intel’s older microprocessors, bad news

Naked Security

March 23, 2018

AMD announces Ryzen patch timeline as disclosure controversy rages

Has an unknown Israeli company called CTS Labs tried to exploit worries over microprocessor flaws for financial gain?

Naked Security

January 04, 2018

F**CKWIT – the video!

Here's a video to help you decide what to do next about F**CKWIT, aka KAISER, aka KPTI, aka Meltdown, aka Spectre, aka The Intel Bug.

Naked Security

January 03, 2018

F**CKWIT, aka KAISER, aka KPTI – Intel CPU flaw needs low-level OS patches

It's known variously as F**KWIT, KAISER and KPTI - it's an Intel CPU flaw that means we need to trade performance for security.

Naked Security