IOActive Labs

New IOActive Labs blog: Tales from the Call-Gate: An SMM Supervisor Vulnerability labs.ioactive.com/2024/10/tales-… @droogie1xp @kiqueNissim

At Defcon tomorrow, researchers will reveal a flaw in hundreds of millions of AMD chips they call "Sinkclose," which would let hackers root into some of the most privileged portions of a computer to install virtually undetectable, unfixable malware. wired.com/story/amd-chip…

Happy and proud to share that our work on the AMD Sinkclose vulnerability has been published by Wired wired.com/story/amd-chip…

Happy to announce that our talk was accepted at #defcon32! Come watch us present about AMD Sinkclose: Universal Ring -2 Privilege Escalation info.defcon.org/event/?id=54863

New blog on exploring AMD Platform Secure Boot including common misconfigurations and implementation issues. Enjoy the read at labs.ioactive.com/2024/02/explor… #AMD #Firmware

Slides (extended version): github.com/IOActive/uefi_… Updated platbox: github.com/IOActive/Platb…

Back to the Future with Platform Security: labs.ioactive.com/2023/06/back-t… @exminium @droogie1xp @kiqueNissim @IOActive @hardwear_io #hw_ioUSA2023

New IOActive Labs blog: Applying Fault Injection to the Firmware Update Process of a Drone: labs.ioactive.com/2023/06/applyi… - By @GabrielGonzalez @IOActive #hardwarehacking

Our team has released a new blog on UEFI security and coordinated disclosure challenges: labs.ioactive.com/2023/02/advent… @IOActive @kiqueNissim @exminium @droogie1xp

New writeup about an unlocked TSEG in the Acer Swift 3 model, resulting in full SMM access: labs.ioactive.com/2022/11/explor… You can verify if your system is properly locked with Platbox: github.com/IOActive/Platb… @IOActive #Acer #SMM #AMD #firmware @exminium @kiqueNissim @droogie1xp

IOActive Labs: NFC RELAY ATTACK ON TESLA MODEL Y    labs.ioactive.com/2022/09/nfc-re… by Josep Pi Rodriguez

IOActive Labs: Satellite (In)security: Vulnerability Analysis of Wideye #SATCOM Terminals labs.ioactive.com/2022/04/satell… by @vinheimsecurity

IOActive Labs: Batteries Not Included: #ReverseEngineering Obscure #Architectures labs.ioactive.com/2022/03/batter… By @vinheimsecurity

New @IoaLabs post Biometric Hacking: Face Authentication Systems labs.ioactive.com/2022/02/biomet… - by Alejo Moles and @GabrielGonzalez

New @IOALabs post on breaching the corporate perimeter: How we hacked your billion-dollar company for forty-two bucks labs.ioactive.com/2022/01/how-we… - by Jamie Riden @IOActive

IOActive Labs: Cracking the Snapcode by Daniel Moder labs.ioactive.com/2021/12/cracki…

IOActive Labs: Breaking Protocol (Buffers): Reverse Engineering #gRPC by @vinheimsecurity labs.ioactive.com/2021/07/breaki…

IOActive Labs: Watch Your Step: Research Into the Concrete Effects of Fault Injection on Processor State via Single-Step Debugging labs.ioactive.com/2021/04/watch-… #hardware #glitching #faultinjection #security #hacking

Probing and Signal Integrity Fundamentals for the Hardware Hacker, part 2: Transmission Lines, Impedance, and Stubs. labs.ioactive.com/2021/02/probin… #hardware #highspeed #electronics #embedded #security #Oscilloscope

IOActive Labs: A Practical Approach to Attacking IoT Embedded Designs (II). labs.ioactive.com/2021/02/a-prac… by @reversemode #Bluetooth #IoT #Zigbee #embedded #vulnerabilities