Bug in Skylake CPUs allows attackers to take control over PC using USB

File: A-computer-bug-007.jpg (80KB, 460x276px) Image search: [Google]

80KB, 460x276px

>Security vendor Positive Technologies discovered a bug in some Intel Skylake CPUs that allows an attack to take full control over the system through USB. The problem is the debugging interface of the CPU that can be accessed through USB.

>The Intel chip debugger leaves the chip open to hacking and because it sits below the software layer isn't easily detected. Researchers from Positive Technologies have revealed that some new Intel CPUs contain a debugging interface, accessible via USB 3.0 ports, that can be used to obtain full control over a system and perform attacks that are undetectable by current security tools reports scmagazine.com

>The bug is easy to exploit as no special equipment is required, state the researchers. However, attackers do need physical access to the system and the bug only appears to be only present on Skylake U CPUs that are only used in NUCs and Ultrabooks.

>An attacker could use this to bypass all security systems for the embedding of code over a certain period of time, reading all possible data and even making the machine inoperative, for instance by re-writing its BIOS. A talk on the mechanisms needed for such attacks, and ways to protect against them, was given by Maxim Goryachy and Mark Ermolov at the 33rd Chaos Communication Congress in Hamburg, Germany.

http://www.guru3d.com/news-story/bug-in-skylake-cpus-allows-attackers-to-take-control-over-pc-using-usb.html

@

WTF, I HATE INTEL NOW!