Researchers discover potentially catastrophic exploit present in AMD chips

Researchers from IOActive have identified a significant vulnerability in AMD processors, termed the "Sinkclose" flaw, which has existed for over a decade. This security issue resides in the firmware of AMD chips, potentially allowing malware to gain deep access to a computer's memory and execute code in the System Management Mode, a highly privileged area of the processor. The flaw affects nearly all AMD chips dating back to at least 2006. While the exploit is serious, it is unlikely to impact average users, as attackers would need extensive access to the system to exploit it fully. However, the risk is heightened for corporations and government entities, as the malicious code could remain undetected even after an operating system reinstall. AMD has acknowledged the vulnerability and is working on mitigation strategies for affected products, although the company emphasizes that exploiting this flaw requires overcoming significant security measures. IOActive has refrained from releasing proof-of-concept code while AMD develops patches, stressing the urgency of addressing the issue to maintain overall system security.

- A significant vulnerability in AMD processors has been discovered, affecting nearly all chips since 2006.

- The exploit allows deep access to a computer's firmware, posing risks primarily to corporations and government entities.

- AMD is working on mitigation strategies and has acknowledged the seriousness of the flaw.

- Exploiting the vulnerability requires extensive access, making it less likely to affect average users.

- IOActive has chosen not to publish proof-of-concept code while AMD develops necessary patches.