Security researchers have identified potential hardware backdoors in certain x86 processors. The findings, detailed in a GitHub repository called Rosenbridge, reveal vulnerabilities at the processor level that could allow unauthorized access.
The discovery highlights a critical attack surface in modern CPUs that operates below the operating system level, making detection and mitigation significantly more difficult than traditional software vulnerabilities.
Hardware-level backdoors are particularly concerning because they persist across system reboots and cannot be patched through standard software updates. The affected processors contain undocumented or deliberately obscured functionality that could potentially be exploited by sophisticated threat actors.
The research has generated substantial discussion in the security community, with 37 comments and 120 points on Hacker News, indicating widespread interest among developers and security professionals.
Affected users have limited remediation options beyond replacing hardware. The findings underscore the importance of supply chain security and raise questions about processor verification and transparency in CPU design and manufacturing.
Processor manufacturers have not yet publicly commented on the specific vulnerabilities identified in the research.
Flock Safety, the traffic camera company, is expanding beyond law enforcement with plans to deploy dashcams in rideshare vehicles and offer coaching services to police departments.
A sharp rise in explicit deepfake images of UK children has been reported by an online safety service, as authorities warn that AI tools are making the creation of sexualized or 'nudified' content increasingly accessible.
Gen's latest threat report details two distinct attack campaigns exploiting compromised email accounts and clipboard manipulation to steal from businesses and cryptocurrency users.
Two security researchers purchased commonly-used generic email domains and discovered hundreds of companies automatically sending sensitive corporate data to their listening services. The experiment reveals a widespread failure in email configuration practices across organizations.