vInfrastructure Blog

Reading Time: 4 minutes Evolution of the security landscape The digital security landscape has changed faster in the last years and more in the last months with the COVID-19 pandemic. People are working more and more from home with smart working, but not all companies are prepared to secure those access and their digital workspace. The consequence is that there are more attack and threads the are focused on people instead of corporate services or infrastructures. But also, the rising of the cloud services model makes the attack easier and more effective… You can buy them as a service… […]

Reading Time: 4 minutes The 2018 was the year of the CPU related threats, starting with the Meltdown and Spectre bugs affecting several processors, but with most of issues related to Intel based CPU. Unfortunately, this was only the beginning and many other bugs were discovered later. And we’re probably just at the tip of the iceberg.

Reading Time: 3 minutes The 140 series of Federal Information Processing Standards (FIPS) are U.S. government computer security standards that specify requirements for cryptography modules. The National Institute of Standards and Technology (NIST) issues the 140 Publication Series to coordinate the requirements and standards for cryptographic modules which include both hardware and software components for use by departments and agencies of the United States federal government. The requirements cover not only the cryptographic modules themselves but also their documentation and (at the highest security level) some aspects of the comments contained in the source code.

Reading Time: < 1 minute This is an article realized for StarWind blog and focused on the possible security threats in a virtual environment. See also the original post. Security is typically a hot-topic due also to several regulations and compliant rules and laws. But more important, a security breach can have huge collateral effects, also if no data has been stoled, or compromised. But, for example, a “simple” DoS attack that makes a service not available can have a bad effect on the reputation of a B2C company. This post will try to give an idea of some possible security threads in a […]

Reading Time: 2 minutes Now that Meltdown and Spectre vulnerabilities are almost fixed, there is a new critical vulnerability for several Intel CPU called BranchScope, discovered by some researchers from four universities. It’s again a speculative execution issue, in the method a processor uses to predict where its current computational task. By exploiting this flaw, attackers with local access could pull data stored from memory that’s otherwise inaccessible to all applications and users.