Tag

Cross Origin Attack

All articles tagged with #cross origin attack

technology3 years ago•2 min saved

"Pixel-Stealing Attack Exposes Vulnerabilities in GPUs from Major Suppliers"

Researchers have discovered a new cross-origin attack that affects GPUs from all major suppliers, allowing malicious websites to read sensitive visual data displayed by other websites. The attack violates the same origin policy, a critical security principle that isolates content hosted on different website domains. The attack, known as GPU.zip, currently only works on Chrome and Edge browsers and requires specific browser settings to be enabled. While the impact of this attack is currently limited, web developers can mitigate the threat by properly restricting sensitive pages from being embedded by cross-origin websites.

via Slashdot|

#cross-origin-attack #gpus #same-origin-policy

cybersecurity3 years ago•4 min saved

"Pixel-Stealing Attack Exposes Vulnerabilities in Major GPU Suppliers"

GPUs from all major suppliers, including Apple, Intel, AMD, Qualcomm, Arm, and Nvidia, are vulnerable to a newly discovered cross-origin attack called GPU.zip. This attack allows malicious websites to read sensitive visual data, such as usernames and passwords, displayed by other websites. By exploiting a compression side channel in GPUs, attackers can bypass the same origin policy and steal pixels one by one. The attack works on both internal and discrete GPUs and requires the user to load the malicious page in Chrome or Edge browsers. Firefox and Safari are not vulnerable to this attack.

via Ars Technica|

#compression-side-channel #cross-origin-attack #cybersecurity