New GoFetch Vulnerability in Apple's M Chips Allows Secret Keys Leak on Compromised Computers

New GoFetch Vulnerability in Apple's M Chips Allows Secret Keys Leak on Compromised Computers

The newly exposed GoFetch vulnerability affecting Apple’s M1, M2 and M3 chips lets an attacker exfiltrate secret keys from cryptographic applications on a targeted system. The exploit works by running a fraudulent process on the same CPU cluster as the targeted process on the targeted machine. No easy mitigation currently exists for this vulnerability, as it resides in the hardware. What is the GoFetch vulnerability? GoFetch is a cache side-channel vulnerability. This type of vulnerability…

Read More

Cisco and Intel Launch Private 5G Innovation Centers

Cisco and Intel Launch Private 5G Innovation Centers

In an expanded collaboration with Intel, we’re giving partners and customers an exciting opportunity to access three new innovation centers that will serve as test beds for enterprises seeking to evaluate private 5G use cases. The first innovation center opens in November at Cisco’s San Jose headquarters and will help customers test a wide range of private 5G solutions in a real-world environment through pilots and prototypes prior to full deployment. Additional labs are planned…

Read More

Intel Spins Off Enterprise Generative AI Deployment Firm Articul8

Intel Spins Off Enterprise Generative AI Deployment Firm Articul8

Intel and the global investment firm DigitalBridge Group have formed an independent generative AI software stack company, Articul8 AI, Inc. (Articul8); Intel announced the new company on Jan. 3. Articul8 will work with Intel and provide solutions for organizations that wish to build and deploy generative AI. Articul8’s product and capabilities Articul8’s product is “a turnkey GenAI software platform that delivers speed, security and cost-efficiency to help large enterprise customers operationalize and scale AI,” according…

Read More

Widespread Windows and Linux Vulnerabilities Could Let Attackers Sneak in Malicious Code Before Boot

Widespread Windows and Linux Vulnerabilities Could Let Attackers Sneak in Malicious Code Before Boot

Lenovo, AMI and Insyde have released patches for LogoFAIL, an image library poisoning attack. Researchers at firmware supply chain security platform company Binarly discovered a set of security vulnerabilities that open almost all Windows and Linux computers up to attack. The security researchers named the attack LogoFAIL because of its origins in image parsing libraries. Binarly announced its discovery on Nov. 29 and held a coordinated mass disclosure at the Black Hat Security Conference in…

Read More

Microsoft Azure Confidential VMs Will Roll Out This December

Microsoft Azure Confidential VMs Will Roll Out This December

The partnership with Intel allows for hardware-enforced security and confidentiality on 4th Gen Xeon processors. Image: monticellllo/Adobe Stock Organizations using Microsoft Azure will have access to confidential virtual machines in Azure on Dec. 1, allowing greater privacy and compliance. The DCesv5 and ECesv5-series confidential VMs run on 4th Gen Intel Xeon Scalable processors with Intel Trust Domain Extensions (TDX). The new confidential VMs will be accessible in Microsoft Azure regions Europe West, Europe North, Central…

Read More

Intel Patches Widespread Processor Vulnerability

Intel Patches Widespread Processor Vulnerability

The strange vulnerability could have allowed for escalation of privilege, denial of service or information disclosure attacks. Intel has published a fix for a potential vulnerability that affected some Intel processors. The security flaw, named Reptar, causes “very strange behavior,” said Google’s Tavis Ormandy, who is one of the researchers who discovered the bug. No attacks have been reported using the Reptar bug. However, Ormandy noted the bug is potentially wide-reaching and not yet fully…

Read More

VMware Explore Barcelona 2023: Enhanced Private AI and Sovereign Cloud Services Announced

VMware Explore Barcelona 2023: Enhanced Private AI and Sovereign Cloud Services Announced

VMware’s Private AI platform will include interoperability with Intel, IBM’s watsonx and Kyndryl. Image: Adobe Stock/CrazyCloud Cloud computing company VMware rolled out new cloud, AI, edge and data services at VMware Explore Barcelona 2023 on November 7. The new private AI and sovereign cloud services reflect the increased adoption of AI products. The VMware site has details about the international availability of the company’s platforms and services Jump to: Private AI platform partners with Intel,…

Read More