Product security @intelsecurity, Dirt Biker. Tweets are my own
Hillsboro, OR
Joined November 2008
- Tweets838
- Following429
- Followers758
- Likes344
Jerry Bryant retweeted
See how Intel provides the safest platforms for executing software in 2026, read the Intel Platform Security report here: ms.spr.ly/6013Qt4qU
In this episode of Chips & Salsa, @SecurityCRob and I talk to @anders_fogh and @lavados (Daniel Gruss) about their @BlackHatEvents 2024 talk "Microarchitecture vulnerabilities: Past, Present, and Future.
youtu.be/wxmTKbd6F0U?feature…
Jerry Bryant retweeted
If hardware isn’t secure, then a system can’t be either – and technology vendors have an essential role to play. 🔒
Intel’s long-standing commitment to security has never been stronger. 💪🏽 Check out Intel’s 2023 Product Security Report. intel.ly/3OTFm3L
ALT Intel security
According to ABI Research, Intel is #1 in the silicon industry for product security assurance. Read more about that and get the 2023 Intel Product Security Report: bit.ly/3uEHhT6
Unified fuzzing from boot all the way to user space in one tool: Target Software Fuzzer for the Intel Simics Simulator (TSFFS). What is "Tisyphus" in 59 seconds with @SecurityCRob, Brandon Marken, and Rowan Hart of Intel. Read the blog here: bit.ly/4bPCj6T
Intel's February 13, 2024 Patch Tuesday in 59 seconds with myself and @SecurityCRob
Quick overview of the Intel Security Advisories for February 2024 with @SecurityCRob
community.intel.com/t5/Blogs…
Information about INTEL-SA-00950, Redundant Prefix Issue (AKA "Reptar") community.intel.com/t5/Blogs…
We've just published a new paper covering firmware signing keys to address some confusion around the purpose of private keys that have previously been leaked. All known Intel keys in these leaks are pre-production keys. Read more about what those are. community.intel.com/t5/Blogs…
Introducing AEX-Notify, a new ISA extension incorporated into the SGX spec to help thwart precise single-stepping attacks through interrupt awareness for Intel SGX enclaves. Awesome collaboration between Intel and academia! community.intel.com/t5/Blogs…
Learn more about GDS/Downfall and watch our interview with @flowyroll (Daniel Moghimi) along with guidance for customers from Intel VP Vivek Tiwari. community.intel.com/t5/Blogs…
Our latest MCU released last week had [INTEL-SA-NA] listed as the purpose which has led to confusion. We've added a note to clarify that there are no vulnerabilities addressed in microcode-20230512. These are functional updates. github.com/intel/Intel-Linux…
In Chips & Salsa episode 47, @SecurityCRob and I got to talk to @arungupta (@OpenAtIntel) about Intel's open ecosystem strategy. Thanks Arun for sharing your insights! youtu.be/sD7ZEoFFZqw
Data Fortify is a new systemic mitigation for memory corruption vulnerabilities. Tune in to Chips & Salsa e53 as @jerry_Intel and @SecurityCRob talk to Intel’s @hasarfaty about how Data Fortify helps eliminate classes of attack. youtu.be/iXFJBUgM4sM
Jerry Bryant retweeted
Another "memcpy" vulnerability found in by #FlashbackTeam in that lead to code execution that could have been blocked via #DataFortify #mitigation
more info here:
intel.com/content/dam/www/pu…
Awesome video from @FlashbackPwn team about their security research and exploitation.
This is part 1: DNS Remote Code Execution - Finding the Vulnerability
youtube.com/watch?v=xWoQ-E8n…
In Chips & Salsa episode 43, @SecurityCRob and I talk to Intel's Diana Carol about her role as an SDL Content Architect youtu.be/n5tt_unrwIw