dcn-eu logo
Story image

Flaw discovered in Intel chips, allows attackers to steal cloud data

16 Aug 2018

Researchers have discovered another security flaw in Intel security chips – the third one this year after Spectre and Meltdown.

The flaw allows an attacker to steal sensitive information stored on personal computers or third-party clouds. 

According to their research report, Foreshadow has two versions, the original attack designed to extract data from Intel SGX enclaves and a Next-Generation version which affects Virtual Machines (VMs), hypervisors (VMM), operating system (OS) kernel memory, and System Management Mode (SMM) memory.

The flaw was discovered by researchers from the Israel Institute of Technology, University of Michigan, the University of Adelaide, and the Catholic University of Leuven.

The report says that mitigations against Meltdown and Spectre are not effective against Foreshadow and Foreshadow-NG.

On its website, Intel says it has “worked with operating system vendors, equipment manufacturers, and other ecosystem partners to develop platform firmware and software updates that can help protect systems from these methods.”

“This includes the release of updated Intel microprocessor microcode to our customers and partners.”

Affected CPUs

Intel confirmed that Foreshadow affects all SGX-enabled Core processors (Skylake and Kaby Lake), while Atom family processors with SGX support remain unaffected. Intel confirmed that Foreshadow-NG affects the following processes:

·  Intel Core i3/i5/i7/M processor (45nm and 32nm)

·  2nd/3rd/4th/5th/6th/7th/8th generation Intel Core processors

·  Intel Core X-series Processor Family for Intel X99 and X299 platforms

·  Intel Xeon processor 3400/3600/5500/5600/6500/7500 series

·  Intel Xeon Processor E3 v1/v2/v3/v4/v5/v6 Family

·  Intel® Xeon Processor E5 v1/v2/v3/v4 Family

·  Intel® Xeon Processor E7 v1/v2/v3/v4 Family

·  Intel® Xeon Processor Scalable Family

·  Intel® Xeon Processor D (1500, 2100)

Cloud threat defence company RedLock’s Cloud Security VP Matthew Chiodi says, “What’s interesting about the Intel disclosure is that researchers simply followed the thread left by Spectre and Meltdown—this isn’t a completely new class of vulnerabilities.

“This means that while Intel is not officially aware of any exploits that take advantage of this today, certainly advanced nation-states have been working on them.

“Interestingly enough, back in June, the OpenBSD project announced plans to disable support for Intel CPU hyper-threading (HT) due to security concerns around more ‘Spectre-class bugs’ - Their announcement has proved prescient.”

Chiodi adds that public cloud titans Google, Microsoft and AWS quickly responded to Foreshadow by updating their respective infrastructure and services.

“Enterprise cloud consumers tangibly benefited as the vast majority of them are not operating multi-tenant workloads on the same VM.

“That doesn’t mean there’s nothing to do on the end-user side, but the cloud providers have already done a lot of the heavy lifting.

He concludes,” The bottom line is that even the best and fastest fixes aren’t effective unless all stakeholders do their part—this is especially relevant in public cloud given the shared responsibility model.

"It only takes one party, one weak link in the chain, for the exposure to remain.”

Story image
Rubrik extends AWS partnership with Outposts Ready designation
“Supporting AWS Outposts is a natural fit for Rubrik, as our customers innovate more with AWS. Our SI partners also play an essential role as we work together to help our customers succeed.”More
Story image
Pure Storage acquires Portworx for $370m, extends Kubernetes services and support
Pure Storage has signed an agreement to acquire Portworx for approximately $370 million in cash, with the aim of extending Kubernetes and containers solutions and support. This deal represents Pure Storage’s largest acquisition to date. More
Story image
Google commits to 24/7 carbon-free energy by 2030
Alphabet and Google CEO Sundar Pinchai says the world must act now if it has any hope avoiding the worst climate change effects.More
Story image
Cloudera announces availability of Cloudera Data Platform Private Cloud
"Businesses are more agile because they make decisions faster and better with CDP Private Cloud's powerful data analytics experiences."More
Story image
DoiT announces Google Cloud agreement to the value of $1.5bn
Under this agreement, DoiT will deliver cloud services, including the Anthos app modernisation platform, to its global customer base through its Cloud Management Platform, including cost optimisation, and governance.More
Story image
New technologies to drive service provider router market past $15 billion in 2024
"The potential supply of many new products and technologies that meet the new network requirements is emerging from the entire technology ecosystem."More