A privilege escalation attack that is the combination of known issues and weaknesses with Microsoft Exchange will let users become Domain Administrators. No compromised credentials required.
Let's go back to 2015 in this animated Hacker History, when hackers Charlie Miller and Chris Valasek teamed up to show the world how the latest infotainment features in automobiles can be used to remotely hijack the car.
Much like Spectre, BranchScope is an attack that focuses on the processor's branch prediction system. That doesn't mean the processors are hopelessly vulnerable. It just means that as more researchers start exploring various features in modern CPUs, more issues will be found.
Many Internet of Things manufacturers handled security by disabling hardware debugging and locking down the firmware. Security researchers need to bypass these barriers so that they can find and help fix the actual security issues. A researcher talks about a technique gets researchers down to the silicon level.
Duo Labs researcher Mark Loveless explores the importance of attribution and how it can be helpful if your company is attacked.