Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Sasken Partners with VicOne to Deliver End-to-End Automotive Cybersecu...
Ricoh named in TIME World’s Best Companies of 2025 for employee ...
SU Group Holdings Receives Notice of Delisting from Nasdaq Due to Mini...
Fescaro, TUV Nord join forces on auto cybersecurity compliance
Four high-severity flaws found in ERP firm’s products threaten million...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Combating the surge in Asia Pacific credential abuse and ransomware

      Combating the surge in Asia Pacific credential abuse and ransomware

      Wednesday, September 17, 2025, 5:06 PM Asia/Singapore | Features
    • Featured

      The rise of digital wallets: What businesses in APAC need to know

      The rise of digital wallets: What businesses in APAC need to know

      Tuesday, September 2, 2025, 1:59 PM Asia/Singapore | Features
    • Featured

      Resilience the true benchmark for smart infrastructure

      Resilience the true benchmark for smart infrastructure

      Wednesday, August 27, 2025, 8:21 PM Asia/Singapore | Features, IoT Security
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

News

Are your organization’s newer devices at risk from processor vulnerabilities?

By CybersecAsia editors | Tuesday, August 13, 2024, 12:26 PM Asia/Singapore

Are your organization’s newer devices at risk from processor vulnerabilities?

Four recent cases of CPU bugs point to billions of potential hacker attacks in future, that will trivialize the CrowdStrike outage

Intel is currently facing some market heat as its 13th/14th processors have been reported to be unstable due to the excessive voltage applied by the stock boosting algorithm. Even gaming servers using enterprise-grade motherboards and high-performance 13th/14th gen CPUS have been crashing alarmingly, according to news reports.

Similarly, a vulnerability in AMD processors has remained undetected for almost 20 years, until now. Dubbed Sinkclose (aka CVE-2023-31315, CVSS score: 7.5), the bug allows hackers and rogue users with access to the operating system kernel to run code in a privileged execution environment called System Management Mode present in x86-based processors.

Now, researchers from Germany’s CISPA Helmholtz Center for Information Security has disclosed a bug that affects Chinese chip maker T-Head’s XuanTie C910 and C920 processors that could allow attackers to gain unrestricted access to susceptible devices.

The faulty instructions, embedded in the processor hardware, can operate directly on physical memory rather than virtual memory, and thus bypass the process isolation normally enforced by the operating system and hardware. This vulnerability could be weaponized to circumvent security and isolation features, conferring hackers unrestricted access to the device.

Users have a choice to disable the vulnerable instructions, but that will cripple the CPU performance, especially in parallel processing tasks and workloads involving large data sets. This means the fix cannot be accepted as a long-term solution to the problem.

In the case of the Intel 13th/14th gen overheating/overvoltage issue, a microcode patch issued early this month by the firm could be an interim solution to underclock the processors to regain some stability. However, whatever damage that has already been inflicted in some severe overheating cases still need to be addressed under warranty coverage.

For AMD, the bug can be patched via a BIOS firmware update or a hot-loadable microcode update. However, the firm will only patch processors made in 2020 and after.

Finally, Qualcomm’s Adreno GPU had recently been found to contain more than nine flaws that could permit local access to a device to achieve privilege escalation and code execution at the kernel level. The vulnerabilities (CVE-2024-23350, CVE-2024-21481, CVE-2024-23352 and CVE-2024-23353) are being addressed by patches distributed at the device manufacturer level.

Share:

PreviousGlobe Teleservices has achieved Tier 1 status for the second consecutive year in the MNO edition and the enterprise edition for 2024
NextPhilippines Cyber Revolution Summit 2024

Related Posts

Expect China’s anti-Pelosi military exercises to accompany real cyber warfare

Expect China’s anti-Pelosi military exercises to accompany real cyber warfare

Friday, August 5, 2022

Breach of PDPA in Singapore reaches all-time high

Breach of PDPA in Singapore reaches all-time high

Friday, September 20, 2019

A black cat on the prowl: new ransomware making its rounds globally

A black cat on the prowl: new ransomware making its rounds globally

Wednesday, February 9, 2022

Humans are the weak cybersecurity link. And humans can be the mitigators …

Humans are the weak cybersecurity link. And humans can be the mitigators …

Monday, December 21, 2020

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • CISOs can navigate emerging risks from autonomous AI with a new security framework

    CISOs can navigate emerging risks from autonomous AI with a new security framework

    See how security leaders can adopt layered strategies addressing intent, governance, and oversight to manage …Read more
  • MoneyMe strengthens fraud prevention and credit decisioning

    MoneyMe strengthens fraud prevention and credit decisioning

    Australian fintech strengthens risk management with SEON to scale lending operations securely and efficiently.Read more
  • PT Kereta Api Indonesia announces nationwide email and communication overhaul

    PT Kereta Api Indonesia announces nationwide email and communication overhaul

    The state railway operator’s upgraded email system improves privacy, operational reliability, and regulatory alignment for …Read more
  • Operationalizing sustainability in cybersecurity: Group-IB’s approach

    Operationalizing sustainability in cybersecurity: Group-IB’s approach

    See how the firm turned malware-group takedowns into measurements of sustainability and resilience gains: by …Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.