Foreshadow attack

Foreshadow attack

In January 2018, researchers found a vulnerability in Intel computers that could allow hackers to be able to steal confidential information from computers. The vulnerability led researchers to develop an attack to demonstrate the vulnerability. This attack was called: Foreshadow. This vulnerability thankfully, only pertains to Intel computers. This attack allowed them to take information that was supposed to be protected in the SGX memory enclaves. While Intel was investigating the vulnerability they noticed two attacks that were similar; they called this: Foreshadow-NG (Next generation) The information that can be taken with this includes anything in the System Management mode, any virtual machine running on third-party clouds, or Operating System’s Kernal.

Upon hearing of this problem, Intel teamed up with other technology companies to resolve this problem and has released code to try and remedy this. Intel’s advisory on the issue, as well as their updated code and be found here https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html

Articles having already been written about this, so this is a call to get to the people who have not already heard about it to update their computer. There have been enough attacks this year on Exchanges, don’t let them get into your computer as well! -James Hepburn