Foreshadow reveals Intel chip security flaw

Researchers find serious security flaw dubbed ‘foreshadow’ in computer chips created by Intel reports BBC.

Foreshadow will be the third significant flaw discovered this year to impact Intel’s computer chips as a serious security problem. Due to this fault attackers are able to exploit this vulnerability to in order to obtain sensitive information.

Because of the discovery Intel said:

“We are not aware of reports that any of these methods have been used in real-world exploits,” the firm said.

“But this further underscores the need for everyone to adhere to security best practices.”

…Future processors would be built in such a way as to not be affected by Foreshadow.

News of the vulnerability followed two similar attacks – Spectre and Meltdown – that were discovered earlier this year. Collectively the flaws affected billions of computers around the world.

…Foreshadow was discovered by collaborative work by researchers from KU Leuven university in Belgium and others from Adelaide and Michigan. After Intel was made aware of the attack, the chip firm then discovered two more related weaknesses…

…Intel had created its fix prior to details of the flaw being made public, and coordinated its response with the researchers on Tuesday. Its fix disables some of the features in its chips that were vulnerable to the attack the researchers discovered…

To conclude it is important to remember good security practices. Owners of electronic devices are advised to download and install any updates available for software these to minimise security risks.

Read more at: The BBC

PENETRATION TESTING SERVICES BASED IN EXETER, DEVON

Pentesting UK is based in Exeter, Devon helping organisations identify their vulnerabilities, through penetration testing,  ASV scanning, application testing and vulnerability scanning for businesses and organisations across the UK and beyond. Contact us for more info…