安全研究人员发现 AMD 驱动更新为 HTTP,存在中间人篡改攻击风险

IT之家
Feb 07

IT之家 2 月 7 日消息,安全研究员保罗(Paul)发现,AMD 在 Windows 平台上的驱动程序自动更新程序存在高危安全漏洞,可能允许攻击者通过中间人攻击(MITM)植入恶意软件。简单来说,当检测到可用更新后,AMD 驱动更新器会通过未加密 HTTP 连接下载更新包,可能使攻击者通过劫持ati.com域名或下载内容,从而实现远程代码执行(更新进程具备管理员权限)。保罗称其已向 AMD ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10