On November 12, 2019 researchers led by a team at Worcester Polytechnic Institute, disclosed details of two new potentially serious security vulnerabilities — dubbed TPM-Fail — that could allow attackers to steal cryptographic keys protected inside two types of Trusted Platform Modules (TPMs). Because millions of deployed systems probably have the TPM-Fail vulnerability, the scope of exposure is …
A security CTO’s guidelines to making better decisions about cybersecurity. Rule 1: “All things being equal, trust as little as possible.” Rule 2: “Use evidence and experience to measure trustworthiness.” Rule 3: “Distrust proportionally to the level of risk.” Read full article in Dark Reading…
Written by Ari Singer, CTO, TrustiPhi // February 7, 2019 // Part 1 of a two-part TPM Surprise Series Built into billions of devices, a Trusted Platform Module (TPM) is usually a specialized chip on an endpoint’s motherboard that stores cryptographic keys on behalf of its host system for authentication and protection of the endpoint. TPMs will …
Trusted Platform Module: 8 Surprises for IoT Security Read More »