Gregarius » BetaNews.Com » Microsoft denies that BoundHook vulnerability is actually a vulnerability

Canaux

108470 éléments (108470 non lus) dans 10 canaux

Actualités (48730 non lus)

• 01net. Actualités (48730 non lus)

Hoax (65 non lus)

• Top dix quotidien Sophos des canulars (65 non lus)

Logiciels (39066 non lus)

• BetaNews.Com (34382 non lus)
• Presence PC - Actualité Logiciels, jeux vidéos (3551 non lus)
• LeMondeInformatique.fr : Actualités Applications (1133 non lus)

Sécurité (1668 non lus)

• Actualités Sécurité Informatique (406 non lus)
• Les Nouvelles.net : sécurité informatique. (1262 non lus)

Referencement (18941 non lus)

• Secrets2moteurs (11793 non lus)
• Referencement Google WebRankInfo (2255 non lus)
• Abondance (4893 non lus)

BetaNews.Com

• 

  Microsoft denies that BoundHook vulnerability is actually a vulnerability

  Publié: octobre 18, 2017, 4:55pm CEST par Mark Wycislik-Wilson

  Security researchers at CyberArk are reporting about a new technique that could be used to take control of Windows 10 devices. Known as BoundHook, the technique takes advantage of the BOUND hooking technique in Intel MPX (Memory Protection Extensions). But while CyberArk says that it will "bring new capabilities to both software security vendors and malware writers," Microsoft is downplaying the issue, suggesting there is nothing to worry about. CyberArk acknowledges that the "technique can be used in a post-exploitation scenario in which the attacker has control over the asset." That said, it's not something that should necessarily be ignored.… [Continue Reading]