article thumbnail

New TSX Speculative Attack allows stealing sensitive data from latest Intel CPUs

Security Affairs

In the past months, security researchers devised several speculative -channel RIDL (Rogue In-Flight Data Load), Fallout, Microarchitectural Data Sampling ( MDS attacks ), and ZombieLoad. Unlike Meltdown, Spectre , and Foreshadow attacks, MDS attacks target CPU’s microarchitectural data structures.

article thumbnail

From U2F to passkeys

Imperial Violet

Since we don’t want that, the same attestation certificate is used in many security keys and manufacturers are supposed to use the same certificate for batches of at least 100,000 security keys. The credential ID that they return is actually an encrypted seed that allows the security key to regenerate the private key as needed.