New Spectre variants earn $100,000 bounty from Intel

Michael Heller | July 13, 2018

New Spectre variants earn $100,000 bounty from Intel
Researchers discovered two new Spectre variants that can be used to bypass protections and attack systems and earned $100,000 in bug bounties from Intel. Researchers found new speculative execution attacks against Intel and ARM chips, and the findings earned them a $100,000 reward under Intel's bug bounty. The new methods are themselves variations on Spectre v1 -- the bounds check bypass version of Spectre attacks -- and are being tracked as Spectre variants 1.1 and 1.2. The new Spectre 1.1 has also earned a new Common Vulnerabilities and Exposures (CVE) number, CVE-2018-3693, because it "leverages speculative stores to create speculative buffer overflows" according to Vladimir Kiriansky, a doctoral candidate in electrical engineering and computer science at MIT, and Carl Waldspurger of Carl Waldspurger Consulting. "Much like classic buffer overflows, speculative out-of-bounds stores can modify data and code pointers. Data-value attacks can bypass some Spectre v1 mitigations, either directly or by redirecting control flow.

Spotlight

Security breaches are on the rise. Confidential data is now stored and software applications are run on company computer systems, in the cloud and on mobile devices. With ever-increasing points of entry, it is not a surprise that breaches are on the rise. No organization, large or small, is immune t


Other News

Thought leaders come together to discuss the futureof developer relations in a remote-first world

SlashData | September 19, 2020

For immediate release London, United Kingdom Media contact at SlashData Ltd. Viktorija Ignataviciute viktorija@slashdata.co Best practises engaging Open Source and DevOps developers Developer trends; Tracking Covid effect on the industry While industries, businesses and individuals are being challenged significantly, the Future Developer Summit

Read More

SALESFORCE LAUNCHES NEW HYBRID CMS PLATFORM 'SALESFORCE CMS

DECK7 | November 12, 2019

Demand owns content, and with the release of 'Salesforce CMS', it’s clear that Salesforce is putting the control squarely with demand, not to mention delighting the creative marketer with more power through additional tools for creating content that are expected to work well right out of the box (er… cloud). Customers have become accustomed to consuming content across multiple channels and platforms which requires marketers to provide for seamless integration of their content. Enterprises have always been challenged by using multiple systems for their content management. Salesforce CMS addresses these common content challenges and promises more....

Read More

DECK 7 INTERVIEWS SANGRAM VAJRE, CO-FOUNDER & CHIEF EVANGELIST AT TERMINUS

DECK7 | January 13, 2020

DECK 7 is proud to present an exciting interview with the Co-Founder & Chief Evangelist at Terminus, Sangram Vajre. He is an author, keynote speaker, 3x CMO, host of the daily #FlipMyFunnel podcast, entrepreneur and category maker. Sangram has been a driving force behind the success of Terminus and building the ABM subcategory of marketing technology. Before co-founding Terminus, Sangram was Head of Marketing at Pardot through its acquisition by ExactTarget and then Salesforce. A contributing columnist for Inc., he wrote the book, "Account-Based Marketing For Dummies" and is the mastermind behind #FlipMyFunnel, a B2B podcast series that has now over 500 episodes and continues t...

Read More

DECK 7 FRAMEWORK FOR DIGITAL™ REDEFINES ITS B2B MODEL FOR 2020 LEAD-GEN GOALS

DECK7 | January 20, 2020

DECK 7 Inc., a top lead generation company based in San Diego, California, has gone beyond its peers and competitors in their digital marketing efforts for 2020. An esteemed digital marketing and media company, known for executing campaign management and content services to its clients and partners worldwide, DECK 7 has built a comprehensive system to track buyers and influencers, build behavioral models, and putting all the vast intelligence it generates into the hands of its marketing partners. The DECK 7 Framework For Digital™ is the outcome of several years of working together with some of the most innovative and successful companies in the world, and is based on the...

Read More

Spotlight

Security breaches are on the rise. Confidential data is now stored and software applications are run on company computer systems, in the cloud and on mobile devices. With ever-increasing points of entry, it is not a surprise that breaches are on the rise. No organization, large or small, is immune t

Resources

Events