{"id":1666,"date":"2020-05-12T20:35:00","date_gmt":"2020-05-12T20:35:00","guid":{"rendered":"https:\/\/cisobyte.com\/?p=1666"},"modified":"2020-05-21T22:11:23","modified_gmt":"2020-05-21T22:11:23","slug":"thunderspy-intel-thunderbot-ports-vulnerable-to-hands-on-hacking","status":"publish","type":"post","link":"https:\/\/cisobyte.com\/index.php\/2020\/05\/12\/thunderspy-intel-thunderbot-ports-vulnerable-to-hands-on-hacking\/","title":{"rendered":"Thunderspy: Intel Thunderbot ports vulnerable to hands-on hacking."},"content":{"rendered":"

CISObyte\u00a0 \u00a0 05-12-2020<\/strong><\/h4>\n

\u00a0<\/p>\n

It’s not news that any device left unattended with a hacker should be considered compromised. Learn what steps you can take to mitigate a few, but not all of the vulnerabilities.\u00a0<\/h4>\n

\u201cAll the attacker needs is 5 minutes alone with the computer, a screwdriver, and some easily portable hardware.\u201d<\/h2>\n

\u201cThunderspy targets devices with a Thunderbolt port. If your computer has such a port, an attacker who gets brief physical access to it can read and copy all your data, even if your drive is encrypted and your computer is locked or set to sleep.\u201d<\/p>\n

\u201cIntel has not shared why they have chosen not to inform the general public of these issues before.\u201d<\/p>\n

Are you affected? \u201cAll Thunderbolt-equipped systems shipped between 2011-2020 are vulnerable.\u201d \u201cSystems that exclusively provide USB-C ports are not affected.\u201d<\/p>\n

This should already be in your company portable device policy: make sure your device goes where you go, never leave it unattended when unsecured.<\/p>\n