Newsbytes
  • India
  • Business
  • World
  • Politics
  • Sports
  • Technology
  • Entertainment
  • Auto
  • Lifestyle
  • Inspirational
  • Career
  • Bengaluru
  • Delhi
  • Mumbai
  • Videos
  • Visual Stories
  • Reviews
  • Phone Reviews
  • Fitness Bands Reviews
  • Speakers Reviews
  • Find Cricket Statistics
Hindi
More
In the news
Samsung
Elon Musk
Google
Space News
Motorola
Android 13
Newsbytes
Hindi
Newsbytes
User Placeholder

Hi,

Logout


India
Business
World
Politics
Sports
Technology
Entertainment
Auto
Lifestyle
Inspirational
Career
Bengaluru
Delhi
Mumbai
Videos
Visual Stories
Reviews
Phone Reviews
Fitness Bands Reviews
Speakers Reviews
Find Cricket Statistics

More Links
  • Videos

Download Android App

Follow us on
  • Facebook
  • Twitter
  • Linkedin
  • Youtube
 
Home / News / Technology News / Millions of PCs are vulnerable to a Thunderbolt port flaw
Technology

Millions of PCs are vulnerable to a Thunderbolt port flaw

Millions of PCs are vulnerable to a Thunderbolt port flaw
Written by Shubham Sharma
May 12, 2020, 03:09 pm 3 min read
Millions of PCs are vulnerable to a Thunderbolt port flaw

A major security flaw has been flagged in Intel's Thunderbolt port. The issue is said to be affecting millions of Windows and Linux PCs manufactured before 2019. It can reportedly be used by hackers to break into your system and steal all its data in a matter of minutes. Here's all you need to know about it.

Attack
Bypassing lockscreen, hard disk encryptions to steal data

As revealed by security researcher Björn Ruytenberg, a hacker having physical access to your old Thunderbolt-equipped machine could use a technique called 'Thunderspy' and gain access to the machine's data, Wired reported. The method, the researcher explained, works even when the device in question is locked with a password, its hard disk data is encrypted, and the Thunderbolt port access is disabled.

Details
How they could break in?

According to the researcher, to carry out a Thunderspy attack on a vulnerable PC, a hacker just "needs to do is unscrew the backplate, attach a device momentarily, reprogram the firmware [controlling the Thunderbolt port], reattach the backplate." The reprogrammed firmware would let the hacker change Thunderbolt port settings and open the way for any malicious peripheral device to access it.

Impact
Attack hardware comes at just $400

Ruytenberg says the hardware for rewriting the Thunderbolt controller's firmware and overriding its security mechanisms comes at just $400 and could be miniaturized pretty easily in the future. It gives "full access to the laptop," he said, adding that the entire attack could be wrapped up in less than 5 minutes, without leaving a trace behind.

Fix
New Windows, Linux notebooks are protected

The vulnerability was disclosed to Intel in February, following which the company issued a statement clarifying that it has created a Thunderbolt security system called Kernel Direct Memory Access Protection to prevent Thunderspy attacks. However, the thing is, these protections are only available with select notebooks launched in 2019 or later. Older notebooks, including some newer ones from HP, Dell, Lenovo, are still unprotected.

Protection
Check for these protections, don't leave PC unattended

That said, to stay protected, you need to make sure if your notebook has Intel's Thunderbolt protection or not. If yes, you are good to go. But, in case the security protections are not there, you need to be careful while using the Thunderbolt port. This means you should make sure that it is only used with trusted devices.

Quote
Intel has issued a statement on the matter

Meanwhile, Intel says the researchers didn't demonstrate an attack on PCs with its latest mitigation. "Please check with your system manufacturer to determine if your system has these mitigations incorporated. For all systems, we recommend following standard security practices, including the use of trusted peripherals."

Share this timeline
Facebook
Whatsapp
Twitter
Linkedin
Shubham Sharma
Shubham Sharma
Twitter
Editor with over five years of experience in covering all things science, consumer tech, space tech, AI, infosec, and business. A commerce graduate from University of Lucknow. I have been handling Tech beat at NewsBytes since 2018.
Latest
Security
Intel
Dell
Lenovo
Latest
AI brought dead woman back to life at her funeral
AI brought dead woman back to life at her funeral Technology
Maharashtra: Alert in Raigad after boat with explosives, AK-47 found
Maharashtra: Alert in Raigad after boat with explosives, AK-47 found India
Bihar: Man shoot class 9 girl over love affair
Bihar: Man shoot class 9 girl over love affair India
'Faith in justice shaken': Bilkis Bano on rape convicts' release
'Faith in justice shaken': Bilkis Bano on rape convicts' release India
Cincinnati Masters: Borna Coric stuns 2013 champion Rafael Nadal
Cincinnati Masters: Borna Coric stuns 2013 champion Rafael Nadal Sports
Security
Tamil Nadu: 27 get life term for Dalit triple murder
Tamil Nadu: 27 get life term for Dalit triple murder India
How to secure your WhatsApp: Check latest features and settings
How to secure your WhatsApp: Check latest features and settings Technology
J&K Police shoots down Pakistani drone carrying explosives in Kathua
J&K Police shoots down Pakistani drone carrying explosives in Kathua India
Russia-Ukraine crisis: PM chairs high-level meet to review security preparedness
Russia-Ukraine crisis: PM chairs high-level meet to review security preparedness India
Man tries to break into NSA Ajit Doval's residence; detained
Man tries to break into NSA Ajit Doval's residence; detained India
More News
Intel
HP India launches new Omen and Victus laptops: Check features
HP India launches new Omen and Victus laptops: Check features Technology
Infinix INBook X1 Slim laptop launched in India: Check price
Infinix INBook X1 Slim laptop launched in India: Check price Technology
Dell XPS 13, with Alder Lake CPUs, launched: Check price
Dell XPS 13, with Alder Lake CPUs, launched: Check price Technology
Intel launches first-ever 16-core chipset for laptops
Intel launches first-ever 16-core chipset for laptops Technology
ASUS ZenBook S 13, Pro 15 Flip launched: Details here
ASUS ZenBook S 13, Pro 15 Flip launched: Details here Technology
More News
Dell
#DealOfTheDay: Dell Alienware M15 gets discounted by Rs. 44,300
#DealOfTheDay: Dell Alienware M15 gets discounted by Rs. 44,300 Technology
Dell XPS 13 Plus 9320 arrives at Rs. 1.6 lakh
Dell XPS 13 Plus 9320 arrives at Rs. 1.6 lakh Technology
#DealOfTheDay: Dell G15 (2022) discounted by Rs. 24,600 on Amazon
#DealOfTheDay: Dell G15 (2022) discounted by Rs. 24,600 on Amazon Technology
Dell G15 gaming laptop with AMD CPUs launched: Check specifications
Dell G15 gaming laptop with AMD CPUs launched: Check specifications Technology
ASUS launches ZenBook S 13, Vivobook Pro 14, 16X laptops
ASUS launches ZenBook S 13, Vivobook Pro 14, 16X laptops Technology
More News
Lenovo
Lenovo Legion Y700 Ultimate Edition goes official: Check features, price
Lenovo Legion Y700 Ultimate Edition goes official: Check features, price Technology
#DealOfTheDay: Get Lenovo ThinkPad E14 laptop with Rs. 34,000 discount
#DealOfTheDay: Get Lenovo ThinkPad E14 laptop with Rs. 34,000 discount Technology
Best gaming laptops in India under Rs. 1 lakh
Best gaming laptops in India under Rs. 1 lakh Technology
Best 5 laptops under Rs. 40,000 for students in India
Best 5 laptops under Rs. 40,000 for students in India Technology
Lenovo Tab P11 Plus tablet to debut in India soon
Lenovo Tab P11 Plus tablet to debut in India soon Technology
More News
Next News Article
Next News Article

Love Technology news?

Subscribe to stay updated.

Science Thumbnail
India News Business News World News Politics News Sports News Technology News Entertainment News Auto News Lifestyle News Inspirational News
Career News Bengaluru News Delhi News Mumbai News Mukesh Ambani Indian Premier League (IPL) Karnataka Samsung Xiaomi West Bengal
Bihar Virat Kohli Rohit Sharma Haryana Narendra Modi Arvind Kejriwal Tamil Nadu Gujarat Yogi Adityanath YouTube
Instagram Hollywood News Uttar Pradesh Kerala Netflix Bollywood News Mamata Banerjee Maruti Suzuki Rahul Gandhi Elon Musk
Shah Rukh Khan Chelsea FC OPPO Akhilesh Yadav Indian Cricket Team Apple Manchester United Salman Khan Cryptocurrency OnePlus
Amitabh Bachchan ICC Women's World Cup Vivo India vs Sri Lanka
About Us Privacy Policy Terms & Conditions Contact Us Ethical Conduct Grievance Redressal News News Archive Topics Archive IPL 2022 Schedule IPL 2022 Points Table Find Cricket Statistics
Follow us on
Facebook Twitter Linkedin Youtube
All rights reserved © NewsBytes 2022