Hackaday

ASLR^CACHE Attack Defeats Address Space Layout Randomization

Researchers from VUSec found a way to break ASLR via an MMU sidechannel attack that even works in JavaScript. Does this matter? Yes, it matters. A lot. The discovery of this security flaw along with ...
Hackaday

ASLR^CACHE

Researchers from VUSec found a way to break ASLR via an MMU sidechannel attack that even works in JavaScript. Does this matter? Yes, it matters. A lot. The discovery of this security flaw along with ...
Dark Reading

Researcher Finds Hole in Windows ASLR Security Defense

The latest versions of Microsoft Windows are vulnerable to attacks due to a newly discovered vulnerability in Address Space Layout Randomization (ASLR). The vulnerability affects Windows 8, Windows ...
Semiconductor Engineering

SW-HW Co-Design Mitigation To Strengthen ASLR Against Microarchitectural Attacks (MIT)

“Address Space Layout Randomization (ASLR) is one of the most prominently deployed mitigations against memory corruption attacks. ASLR randomly shuffles program virtual addresses to prevent attackers ...
ZDNet

New BlindSide attack uses speculative execution to bypass ASLR

While robust passwords help you secure your valuable online accounts, hardware-based two-factor authentication takes that security to the next level. Read now Academics have developed a new technique ...
Krebs on Security

Tag Archives: address space layout randomization (ASLR)

I recently highlighted a study which showed that most of the top third-party software applications failed to take advantage of two major lines of defense built into Microsoft Windows that can help ...
Network World

JavaScript-based ASLR bypass attack simplifies browser exploits

Researchers have devised a new attack that can bypass one of the main exploit mitigations in browsers: address space layout randomization (ASLR). The attack takes advantage of how modern processors ...
Science Daily

Android security weaknesses caused by performance design identified

Researchers have identified a weakness in one of Android’s security features. The research identifies an Android performance feature that weakens a software protection called Address Space Layout ...
Threat Post

Adobe Extends Security of Reader and Acrobat With Better Sandbox, Force ASLR

Adobe has upgraded the security capabilities of both Reader and Acrobat with new releases this week, extending the functionality of the sandbox and adding a feature that forces all of the DLLs loaded ...
ZDNet

Charlie Miller: 'Difficult to write exploits' for Android 4.1

The latest version of Google's mobile operating system, Android 4.1 (Jelly Bean), significantly beefs up the platform's security. Jelly Bean includes several new exploit mitigations as well as full ...
Ars Technica

OEMs do their part to support ASLR in Vista

Earlier this week, Ars discussed a few of the new security features found in Windows Vista. One feature mentioned, Address Space Layout Randomization (ASLR), has been getting some extra press this ...