Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
2 days ago by Resident Pulser to c/pulse_of_truth
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.
The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into handles passwords for a Windows anti-phishing feature.
The work was done in a lab as a proof of
@infosec.pub
Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).
This community is automagically fed by an instance of Dittybopper.
Commenting rules:
- Be respectful.
- No bigotry (including racism, sexism, homophobia, transphobia).
- No pornography.
- Nothing illegal.
- More rules will be added when necessary
go to feed...
@infosec.pub
Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).
This community is automagically fed by an instance of Dittybopper.
Commenting rules:
- Be respectful.
- No bigotry (including racism, sexism, homophobia, transphobia).
- No pornography.
- Nothing illegal.
- More rules will be added when necessary
go to feed...