This week, someone posted about two alleged new vulnerabilities similar to the critical Meltdown and Spectre flaws that have received global attention recently. They claim the new flaws, which they call Skyfall and Solace, also involve issues with speculative execution. However, they also claimed that the details are embargoed. While some bloggers and Tweeters pointed out these issues, the truth is they have not been validated. In fact, journalists that have followed up on the issues say chip manufacturers haven’t heard about them. I believe they are a hoax but watch the video below for more details why you should ignore news about Skyfall for now.
Episode Runtime: 3:08
Direct YouTube Link: https://www.youtube.com/watch?v=DDqewj93x_I
EPISODE REFERENCES:
- Mysterious site announcing Skyfall and Solace; LIKELY HOAX – SkyfallAttack.com
- Spectre patch causing random reboots – Tech Republic
—Corey Nachreiner, CISSP (@SecAdept)
Can’t see the video. It has a message, ”
This video is restricted. Try signing in with a Google Apps account.”