RAMBleed side channel attack uses Rowhammer to steal sensitive data from computer memory

clock •
RAMBleed is a side-channel attack that enables an attacker to read out physical memory belonging to other processes
Image:

RAMBleed is a side-channel attack that enables an attacker to read out physical memory belonging to other processes

Researchers used RAMBleed to obtain a signing key from an OpenSSH server using normal user privileges

A group of security researchers have unveiled a new attack, dubbed RAMBleed, which uses Rowhammer to extract confidential data stored in a computer's memory. The researchers claimed that they have successfully...

To continue reading this article...

Join Computing

  • Unlimited access to real-time news, analysis and opinion from the technology industry
  • Receive important and breaking news in our daily newsletter
  • Be the first to hear about our events and awards programmes
  • Join live member only interviews with IT leaders at the ‘IT Lounge’; your chance to ask your burning tech questions and have them answered
  • Access to the Computing Delta hub providing market intelligence and research
  • Receive our members-only newsletter with exclusive opinion pieces from senior IT Leaders

Join now

 

Already a Computing member?

Login

More on DevOps

DevOps isn't only about operations: it's both a technical and a management role
DevOps

DevOps: Start large or start small, but never forget about communication

Whether you specialise or try to learn the entire tech stack, remember the three Cs of DevOps: concepts, communication and conflict resolution

Tom Allen
Tom Allen
clock 13 December 2021 • 5 min read
CI/CD is an essential part of the DevOps pipeline
DevOps

What should CI/CD look like in a modern business?

CircleCI's Sam Olukotun explains how to use CI/CD for success

Computing Staff
clock 06 December 2021 • 1 min read
The state of DevSecOps - where are we at with application security?
DevOps

The state of DevSecOps - where are we at with application security?

Merging the security function into DevOps won't happen overnight, but it's a vital step and the barriers aren't as high as sometimes believed

John Leonard
John Leonard
clock 30 November 2021 • 9 min read