/?pid=certified-drivers-apparently-unsafe-21052

Updated:04:18 AM EDT Mar 18


this is ggmania.com subsite Certified Drivers Apparently Unsafe - TechAmok

Certified Drivers Apparently Unsafe - [security]
05:07 PM EDT - Aug,16 2019 - post a comment

Eclypsium, an Oregon security company, claims that drivers on Microsoft's Windows platform are a security mess. Who could have guessed? Their researchers found serious flaws in more than 40 drivers from at least 20 different hardware vendors. Apparently every single one of these vulnerabilities allows the driver to hand over "access to the hardware resources, such as read and write access to processor and chipset I/O space, Model Specific Registers (MSR), Control Registers (CR), Debug Registers (DR), physical memory and kernel virtual memory. This is a privilege escalation as it can move an attacker from user mode (Ring 3) to OS kernel mode (Ring 0)." Basically, complete control of the impacted machine. Not only that, these potentially allow malware to compromise your UEFI and persist across an operating system re-installation. They also add that not only do these drivers provide the necessary access, they also provide the mechanism to make changes. Scary stuff.

What's perhaps most interesting is that every driver they tested was signed by a Certificate Authority and had Microsoft's stamp of approval on them. Tie that to the fact that you can no longer block updates on Home versions of Windows 10, and you've got one heck of a potentially serious problem. In other words, these impacted problematic drivers are almost certainly going to be installed on possibly millions of PCs. If you were thinking that you can just stick with Windows 7 to be safe from these vulnerabilities, sadly, all modern versions of Windows are impacted. You can block updates on Windows 7, however, that's likely not a solution since there is a good chance you're already running problematic drivers. You may also be later to receive a patch for older versions of Windows as the newest version is prioritized.

Short overview of recent news articles

Haley Messick - Saatisfaction @bennybenassi - In10sive Mastercamp (Mar,18 2024 )

1000W CPU: The Most Powerful Desktop Processor (Mar,18 2024 )

Expands Snapdragon 8 Series to Cover More Price Points (Mar,18 2024 )

Train Vs Lamborghini (Mar,17 2024 )

Don't use a Microsoft Account! (Mar,16 2024 )

This Ghillie Made from MIRRORS is SHOCKINGLY GOOD (Mar,16 2024 )

How Hackers Deliver Malware to Hack you using Social Media (Mar,16 2024 )

Call of Duty: Warzone Mobile - Launch Trailer (Mar,15 2024 )

Intel's 4th Attempt At Beating Ryzen - "New" 6.2GHz Core (Mar,14 2024 )

Asus Goes Big with Zenfone 11 Ultra (Mar,14 2024 )

House Passes Bill to Force Sale of TikTok (Mar,14 2024 )

Motorola Brings More Affordable 5G Phones to its 2024 Lineup (Mar,14 2024 )

Capristan Swim - Miami Swim Week | Art Basel Miami (Mar,14 2024 )

The Most Stunning All SSD NAS Ever? Inside QNAP's All-SSD (Mar,11 2024 )

M2 vs M3 MacBook Air - ULTIMATE Comparison! (Mar,11 2024 )

Risky PC Experiment: Direct CPU Water-Cooling! Can It Survive? (Mar,11 2024 )

SpaceX Falcon 9 rocket launches 23 Starlink satellites from (Mar,11 2024 )

I tried the Cheapest Arduino Alternative (that Nobody heard of) (Mar,10 2024 )

This is the WEIRDEST PC I've ever seen. (Mar,10 2024 )

Nvidia Retires GTX 16 Series, GDDR7 Arrives, FSR Upscaling Going AI? (Mar,10 2024 )

The New BIOS Hack That Bypasses Every Antivirus (Mar,09 2024 )

Microsoft says it hasn't been able to shake Russian state hackers (Mar,09 2024 )

iOS 17.4, Out Today, Brings Transcripts to Apple Podcasts (Mar,09 2024 )

Microsoft Kills Android-on-Windows (Mar,09 2024 )

Don't Make These Common PC Building Mistakes! (Mar,08 2024 )

Sydney Sweeney Gets Outcast By Her Hooters Co-Workers On 'SNL' (Mar,07 2024 )

How A Journalist Uncovered America's Secret Doomsday Bunkers (Mar,07 2024 )

Government Banning Hardware Wallets? (Mar,07 2024 )

Xiaomi 14 Ultra Full Review: I prefer to call it '13S Ultra' (Mar,07 2024 )

Windows Defender vs Ransomware 2024 (Mar,05 2024 )

I fixed this PCIe card with tape - I can't believe this worked... (Mar,04 2024 )

Auto Change IP Address in every 3 Seconds - 100% ANONYMOUS (Mar,03 2024 )

Liquid Cooling is Dead (Mar,03 2024 )

This AAA Hedera Powered Game Could EXPLODE HBAR'S VALUE (Mar,02 2024 )

Gaming on Starlink - 2024 Review and Tes (Mar,02 2024 )

World's Fastest Camera Drone Vs F1 Car (ft. Max Verstappen) (Mar,01 2024 )

Top 5 Best CPU Coolers 2024 (Feb,29 2024 )

Tangem vs Cypherock X1 Cold Wallet - Choose Wisely! (Feb,29 2024 )

The All China PC (Feb,29 2024 )

The NEW Legion 7i - A Game Changer (Feb,28 2024 )

First Look 2024: A new era of Samsung AI TV (Feb,28 2024 )

Tesla Model 3 (2024) - Crazy Cool Tech Features!!! (Feb,27 2024 )

The Terrible Simpsons Predictions for 2024 (Feb,26 2024 )

HW News - Intel Wants AMD's Chips, Cooler Master Sues Everyone (Feb,25 2024 )

It CAN be done - The Potato PC (Feb,25 2024 )

What's the best bang-for-the-buck gaming CPU right now? (Feb,25 2024 )

How to never accidentally run Malware: Must Have Windows Tweaks (Feb,25 2024 )

Black Tape Project Full Show / Miami Swim Week (Feb,25 2024 )

3 USB things every Windows user must do right now! (Feb,24 2024 )

Samsung Galaxy Z Fold 6 - WOW! Look At This (Feb,24 2024 )

>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs