Threat Post

Attack Method Highlights Weaknesses in Microsoft CFG

As Microsoft hardens its defenses with tools such as Control Flow Guard, researchers at Endgame are preparing for the reality of Counterfeit Object-Oriented Programming attacks to move from ...
InfoQ

Android P Will Expand its Use of Compiler-Based Security Mitigations

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...
ZDNet

Google's Pixel 3 is the first Android device to ship with new CFI kernel protections

Google's new Pixel 3 handset is the first Android device to feature a new kernel code protection system, the company said today. Named Control Flow Integrity (CFI), this technique works by preventing ...
EurekAlert!

Connect and corrupt: C++ coroutines prone to code-reuse attack despite CFI

A code-reuse attack named Coroutine Frame-Oriented Programming (CFOP) is capable of exploiting C++ coroutines across three major compilers, namely Clang/LLVM, GCC and MSVC. CFOP even succeeds in ...
Threat Post

New Technique Checks Mitigation Bypasses Earlier

Researchers at Endgame are expected at Black Hat to introduce Hardware Assisted Control Flow Integrity (HA-CFI), which leverages features in the micro-architecture of Intel processors for security.