VUSec (@vu5ec) / X

VUSec

228 posts

VUSec

@vu5ec

Systems and Network Security Group @VUamsterdam. Co-led by @herbertbos @c_giuffrida @EKouwe

Amsterdam, The Netherlands

Joined April 2016

VUSec
@vu5ec
May 12, 2025
Spectre v2 is back again! Disclosing "Training Solo": 3 new self-training attack classes, 2 end-to-end exploits, and 2 new hardware issues that break domain isolation even when implemented perfectly. Joint work by @SanWieb @c_giuffrida: vusec.net/projects/train…
VUSec
@vu5ec
Sep 3, 2024
Congratulations to @vustudsec for becoming the first the first Student CyberSecurity Association registered in the Netherlands! And happy to see so many members doing well in our Computer Security Master!
Dear Members, We are thrilled to announce that StudSec has officially become the first-ever Student...
From linkedin.com
VUSec
@vu5ec
May 22, 2024
Today at #SP24, @fcgorter presents Sticky Tags. We uncover performance/security issues in prior ARM MTE schemes based on random tagging (+ a new speculative oracle) and show how to address them with a new deterministic MTE scheme for spatial memory safety: download.vusec.net/papers/stickyt…
VUSec
@vu5ec
May 17, 2024
Our SafeFetch paper @USENIXSecurity is online! Thanks to an optimized in-kernel cache, SafeFetch provides comprehensive protection against double-fetch bugs at a fraction of the cost of prior solutions. Joint work by @victor_duta, Mitchel, @c_giuffrida: download.vusec.net/papers/safefet…
VUSec
@vu5ec
Apr 9, 2024
Branch History Injection (BHI) is back! Disclosing Native BHI, bypassing deployed Spectre-v2/BHI mitigations (e.g., eBPF=off) to leak arbitrary kernel/host memory (e.g., root password hash below). Joint work by @SanWieb @HBitmasks @herbertbos @c_giuffrida: vusec.net/projects/nativ…
GIF