In January 2018, researchers found a vulnerability in Intel computers that could allow hackers to be able to steal confidential information from computers. The vulnerability led researchers to develop an attack to demonstrate the vulnerability. This attack was called: Foreshadow. This vulnerability thankfully, only pertains to Intel computers. This attack allowed them to take information that was supposed to be protected in the SGX memory enclaves.
While Intel was investigating the vulnerability they noticed two attacks that were similar; they called this: Foreshadow-NG (Next generation) The information that can be taken with this includes anything in the System Management mode, any virtual machine running on third-party clouds, or Operating System’s Kernal.
Upon hearing of this problem, Intel teamed up with other technology companies to resolve this problem and has released code to try and remedy this. Intel’s advisory on the issue, as well as their updated code and be found here https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00161.html
I respect Intel's quick response to this problem. The digital world is becoming a scary place concerning security, and companies willing to put in the effort to help make things better gives me hope.
Articles having already been written about this, so this is a call to get to the people who have not already heard about it to update their computer
There have been enough attacks this year on Exchanges, don’t let them get into your computer as well!
-James Hepburn
