Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.

The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into handles passwords for a Windows anti-phishing feature.

The work was done in a lab as a proof of

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You The private email address GitLab gives you for filing issues by email is a

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for

Exploiting Volvo/Eicher’s fleet platform to gain control over all users/vehicles

Exploiting Volvo/Eicher’s fleet platform to gain control over all users/vehicles Source: Hacker News