Quote:Some microprocessors from Intel and AMD are vulnerable to a newly discovered speculative execution attack that can covertly leak password data and other sensitive material, sending both chipmakers scrambling once again to contain what is proving to be a stubbornly persistent vulnerability.

Researchers from ETH Zurich have named their attack Retbleed because it exploits a software defense known as retpoline, which was introduced in 2018 to mitigate the harmful effects of speculative execution attacks. Speculative execution attacks, including one known as Spectre, exploit the fact that when modern CPUs encounter a direct or indirect instruction branch, they predict the address for the next instruction they’re about to receive and automatically execute it before the prediction is confirmed. Spculative execution attacks works by tricking the CPU into executing an instruction that accesses sensitive data in memory that would normally be off-limits to a low-privileged application. Retbleed then extracts the data after the operation is canceled.

(08-09-2022, 05:39 PM)Abdul Haseeb Wrote: THIS NEWS IS SURELY GONNA EFFECT INTEL STOCK PRICES

(09-10-2022, 08:34 PM)XImpalerX Wrote: Do we need a firmware update or is this being patched via an OS update? It also sounds like the fix is going to slow down the CPU speed...