iHash

News and How to's

memory

Google’s Shift to Rust Programming Cuts Android Memory Vulnerabilities by 52%

by Leave a Comment

Sep 25, 2024Ravie LakshmananSecure Coding / Mobile Security Google has revealed that its transition to memory-safe languages such as Rust as part of its secure-by-design approach has led to the percentage of memory-safe vulnerabilities discovered in Android dropping from 76% to 24% over a period of six years. The tech giant said focusing on Safe Coding for new features not … [Read more...] about Google’s Shift to Rust Programming Cuts Android Memory Vulnerabilities by 52%

Enhancing Fileless Attack Detection with Memory Scanning

by Leave a Comment

CrowdStrike introduces memory scanning into the CrowdStrike Falcon® sensor for Windows to enhance existing visibility and detection of fileless threats The Falcon sensor integrates Intel threat detection technology to perform accelerated memory scanning for malicious byte patterns Memory scanning is optimized for performance on Intel CPUs, including high-performance operation, … [Read more...] about Enhancing Fileless Attack Detection with Memory Scanning

How to Extract Memory Information to Spot Linux Malware

by Leave a Comment

Threat actors go to great lengths to hide the intentions of the malware they produce This blog demonstrates reliable methods for extracting information from popular Linux shells Extracted memory information can help categorize unknown software as malicious or benign and could reveal information to help incident responders Some malware is only ever resident in memory, so memory … [Read more...] about How to Extract Memory Information to Spot Linux Malware

Facebook Patches “Memory Disclosure Using JPEG Images” Flaws in HHVM Servers

by Leave a Comment

Facebook has patched two high-severity vulnerabilities in its server application that could have allowed remote attackers to unauthorisedly obtain sensitive information or cause a denial of service just by uploading a maliciously constructed JPEG image file.The vulnerabilities reside in HHVM (HipHop Virtual Machine)—a high-performance, open source virtual machine developed by … [Read more...] about Facebook Patches “Memory Disclosure Using JPEG Images” Flaws in HHVM Servers

OpenSSH Now Encrypts Secret Keys in Memory Against Side-Channel Attacks

by Leave a Comment

In recent years, several groups of cybersecurity researchers have disclosed dozens of memory side-channel vulnerabilities in modern processors and DRAMs, like Rowhammer, RAMBleed, Spectre, and Meltdown.Have you ever noticed they all had at least one thing in common?That's OpenSSH.As a proof-of-concept, many researchers demonstrated their side-channel attacks against OpenSSH … [Read more...] about OpenSSH Now Encrypts Secret Keys in Memory Against Side-Channel Attacks

RAMBleed Attack – Flip Bits to Steal Sensitive Data from Computer Memory

by Leave a Comment

A team of cybersecurity researchers yesterday revealed details of a new side-channel attack on dynamic random-access memory (DRAM) that could allow malicious programs installed on a modern system to read sensitive memory data from other processes running on the same hardware.Dubbed RAMBleed and identified as CVE-2019-0174, the new attack is based on a well-known class of DRAM … [Read more...] about RAMBleed Attack – Flip Bits to Steal Sensitive Data from Computer Memory