Electronic circuit board production and computer chip fly test by robotic automated machine. (Getty Images) In studying tech supply chain, feds cite open source products, device firmware The White House ordered Commerce and Homeland Security to examine weak spots in how the IT and communications industries produce hardware and software. Feb 25, 2022 By Joe Warminsky
Hardware in SonicWall’s SMA 100 series. (SonicWall) SonicWall issues patch for firmware zero-day used to attack the company and its customers The bug is in SMA 100 mobile networking, which aims to add a layer of security fo employees using their own devices to access corporate networks. Feb 4, 2021 By Joe Warminsky
The Pluton security processor is a big investment (Photo courtesy of Microsoft). Microsoft’s new ‘Pluton’ security processor gets buy-in from Intel, AMD It's an ambitious project inspired by the infamous Spectre and Meltdown flaws. Nov 17, 2020 By Sean Lyngaas
(Pixabay) Rare case of UEFI hacking hit targets interested in North Korea, Kaspersky says The attack appears to mark an evolution in cyber-espionage. Oct 5, 2020 By Sean Lyngaas
(Getty Images) Gigabytes of ‘sensitive’ internal Intel documents dumped online The company confirmed the incident is under investigation. Aug 6, 2020 By Greg Otto
(Getty Images) New bug in PC booting process could take years to fix, researchers say Billions of devices are affected, according to Eclypsium. Jul 29, 2020 By Sean Lyngaas
(Getty Images) Hackable firmware lurks inside Dell, HP and Lenovo computers amid supply chain security efforts "Unsigned" firmware continues to haunt the hardware industry. Feb 19, 2020 By Sean Lyngaas
New research from hardware security company Eclypsium found ways to attack “Direct Memory Access,” a feature that is built into modern laptops. (Getty Images) Why direct-memory attacks on laptops just won’t go away The access to a computer the attack enables — executing code before the computer is even booted up — is insidious. Jan 30, 2020 By Sean Lyngaas
Why one researcher mimicked Russian hackers in breaking into a European utility Jason Larsen was tired of hearing how skilled Sandworm was, so he used one of their techniques to improve a client's security. Jan 23, 2020 By Sean Lyngaas
(Getty Images) Intel pushes for hardware-specific additions to vulnerability taxonomy A new proposal is an outgrowth of the Spectre and Meltdown revelations from January 2018. Jan 15, 2020 By Sean Lyngaas