@LTrampert
Joined April 2018
  • Tweets12
  • Following67
  • Followers52
1Media
Leon Trampert retweeted
Ruiyi Zhang@RayiizzzJan 15
Today we reveal StackWarp: a new CPU vulnerability exploiting a synchronization bug in AMD’s stack engine across Zen 1–5 CPUs. It enables deterministic manipulation of Confidential VM's stack pointer, allowing RCE and privilege escalation via both control- and data-flow hijacking
16
168
8
1,324
150,505
Leon Trampert retweeted
Michael Schwarz@misc0110Jan 15
StackWarp: A new CPU vulnerability affecting AMD SEV-SNP (Zen 1-5). A malicious host can manipulate the stack pointer inside the confidential virtual machine, breaking integrity and confidentiality guarantees. /cc @Rayiizzz stackwarpattack.com/
8
1
44
4,438
Leon Trampert retweeted
Daniel Weber@weber_daniel12 Aug 2025
Thrilled to present our (Lukas G., @LTrampert ,Youheng L, @jovanbulck ,@misc0110) newest paper ("SCASE: Automated Secret Recovery via Side-Channel-Assisted Symbolic Execution") at #USENIX Security this week! 1/n
2
3
6
665
Leon Trampert retweeted
Daniel Weber@weber_daniel30 Mar 2025
Heading to Black Hat Asia now! @LTrampert and I will give a briefing about deanonymizing users not only on the web but also in their email clients! #BHASIA
3
4
586
Leon Trampert retweeted
Fabian Thomas@fth0mas6 Aug 2024
Join Lorenz (@hetterichlorenz) and me tomorrow at our #BHUSA briefing "Arbitrary Data Manipulation and Leakage with CPU Zero-Day Bugs on RISC-V." We'll unveil a novel architectural CPU bug that breaks all security isolations on affected RISC-V hardware. blackhat.com/us-24/briefings…
8
1
19
2,371
Leon Trampert retweeted
Ruiyi Zhang@Rayiizzz14 Nov 2023
#CacheWarp: a new software-based fault attack on AMD EPYC CPUs. It allows attackers to hijack control flow, break into encrypted VMs and perform privilege escalation inside the VM within minutes.
1
45
3
121
37,402
Leon Trampert retweeted
Daniel Weber@weber_daniel25 Sep 2023
Had the pleasure to present two papers at ESORICS today! The first analyzes the remaining attack surface of Meltdown 3a, the second (presented together with @fth0mas) shows that we can use Meltdown-US to leak the cache state of kernel structures on fully patched systems! 1/n
1
6
26
3,410
Leon Trampert retweeted
Fabian Thomas@fth0mas14 Jun 2023
I'm thrilled to present our (@____salmon____, @misc0110) work Hammulator, a parameterizable Rowhammer simulator, at #DRAMSec 2023 (June 17). Our simulator supports both syscall and full-system emulation, enabling comprehensive analysis of #Rowhammer attacks and mitigations.
4
6
950
Leon Trampert retweeted
Ruiyi Zhang@Rayiizzz15 Nov 2022
Thrilled to announce my first #Blackhat talk! We (@weber_daniel, @misc0110) will present how the power-optimization instructions umonitor/umwait can be abused to mount microarchitectural attacks. #BHMEA22
2
3
14
Super excited for my first #BlackHat talk at #BHMEA22! Join me tomorrow at 17:45 where I showcase our (@misc0110 & @chrossow) work on how information about the CPU can be leaked from the browser. Such information can be used to assist mounting microarchitectural exploits.
5
16
Leon Trampert retweeted
Daniel Weber@weber_daniel14 Nov 2022
Really excited for our (@misc0110, @mlqxyz) Black Hat MEA presentation about fuzzing modern CPUs to find microarchitectural attacks. #BHMEA22
3
8
1
38
Load more