Understanding the CPU Vulnerability - Security Intelligence

A CPU vulnerability was discovered independently by researchers from academia and Google on Jan. 3, 2018. This design flaw impacts all modern microprocessors.

This infographic will help you understand what this vulnerability means and whether your devices may be impacted.

For additional information, read the blog, “CPU Vulnerability Can Allow Attackers to Read Privileged Kernel Memory and Leak Data” and visit the X-Force Collection.

Read the blog: CPU Vulnerability Can Allow Attackers to Read Privileged Kernel Memory and Leak Data

Security Intelligence Staff

Hive0051 goes all in with a triple threat

13 min read - As of April 2024, IBM X-Force is tracking new waves of Russian state-sponsored Hive0051 (aka UAC-0010, Gamaredon) activity featuring new iterations of Gamma malware first observed in November 2023. These discoveries follow late October 2023 findings, detailing Hive0051's use of a novel multi-channel method of rapidly rotating C2 infrastructure (DNS Fluxing) to deliver new Gamma malware variants, facilitating more than a thousand infections in a single day. An examination of a sample of the lures associated with the ongoing activity reveals…

GootBot – Gootloader’s new approach to post-exploitation

8 min read - IBM X-Force discovered a new variant of Gootloader — the "GootBot" implant — which facilitates stealthy lateral movement and makes detection and blocking of Gootloader campaigns more difficult within enterprise environments. X-Force observed these campaigns leveraging SEO poisoning, wagering on unsuspecting victims' search activity, which we analyze further in the blog. The Gootloader group’s introduction of their own custom bot into the late stages of their attack chain is an attempt to avoid detections when using off-the-shelf tools for C2…

Black Hat 2022 Sneak Peek: How to Build a Threat Hunting Program

4 min read - You may recall my previous blog post about how our X-Force veteran threat hunter Neil Wyler (a.k.a “Grifter”) discovered nation-state attackers exfiltrating unencrypted, personally identifiable information (PII) from a company’s network, unbeknownst to the security team. The post highlighted why threat hunting should be a baseline activity in any environment. Before you can embark on a threat hunting exercise, however, it’s important to understand how to build, implement and mature a repeatable, internal threat hunting program. What are the components…

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

More from Advanced Threats

Hive0051 goes all in with a triple threat

GootBot – Gootloader’s new approach to post-exploitation

Black Hat 2022 Sneak Peek: How to Build a Threat Hunting Program

Topic updates