SN877: The "Hertzbleed" Attack
from Security Now - 16k MP3 Hosted by TWiT
This week, after dealing with a major piece of errata from last week, we look at Germany's reaction to the EU's proposed "let's monitor everyone and privacy be damned" legislation. The Conti gang finally pulls the last plug. We have an update on the status of Log4J and Log4Shell and a weird proposal for a "311" cyber attack reporting number, and a sweeping 56 new vulnerabilities were found and reported across the proprietary technologies of major industrial control technology providers. And this week we have a piece of miscellany, followed by ten interesting items of closing-the-loop feedback to share from our listeners. We will then take a deep dive into the latest "HertzBleed Attack" which leverages the dynamic speed scaling present in today's modern processors. We'll examine another effective side-channel attack – which is even effective against carefully-written post-quantum crypto – and can be used to reveal its secret keys.
Embed this episode
No transcript yet.