When Lightning Strikes Thrice: Breaking Thunderbolt 3 Security

[[correlate]]

Content source

https://thunderspy.io/

Thunderspy targets devices with a Thunderbolt port. If your computer has such a port, an attacker who gets brief physical access to it can read and copy all your data, even if your drive is encrypted and your computer is locked or set to sleep.

Thunderspy - When Lightning Strikes Thrice: Breaking Thunderbolt 3 Security

 

[scorpionv]

For work, I'm using a Thunderbolt dock/charger combo. So basically I'm screwed, as I can not disable Thunderbolt through the BIOS.

Locking my workstation while taking a break is standard practice, but that does not stop Thunderspy. My dock does not even have to be connected. Only a full shutdown will make my system secure

Get some wise men cracking Intel!

 

[Gandalf_The_Grey]

Microsoft explains how secured-core PCs mitigate Thunderspy and other attacks:

What you need to know

• Microsoft explains how Secured-core PCs mitigate attacks like Thunderspy in a new post.
• Thunderspy utilizes the Thunderbolt port to affect direct access memory.
• Secure-cored PCs have Kernel direct access memory protection to protect from Thunderspy and similar attacks.

Microsoft explains how secured-core PCs mitigate Thunderspy and other attacks

Secured-core PCs help mitigate attacks like Thunderspy by requiring a device to be unlocked to gain direct memory access.

www.windowscentral.com

Secured-core PCs protect your data down to the hardware:

What you need to know

• Microsoft partnered with several PC manufacturers to create Secured-core PCs.
• These PCs protect data and devices at a hardware, firmware, and software level.
• Dell, Dynabook, HP, Lenovo, Panasonic, and Microsoft all have devices that are Secured-core PCs.

Secured-core PCs protect your data down to the hardware

Secured-core devices protect data at a deeper level than just software.

www.windowscentral.com

Meet the most secure Windows PC:

Windows 11 Secured-Core PCs | Microsoft

Get the most secure computers running Windows 11 for your business. These PCs are built for advanced security needs and protect the most sensitive data.

www.microsoft.com

 

[silversurfer]

Thunderspy attacks: What they are, who’s at greatest risk and how to stay safe

All you need to know about preventing adversaries from exploiting Thunderspy, the recently disclosed vulnerabilities in the Thunderbolt interface.

www.welivesecurity.com