Everything Threat Times has reported about Privasys: 6 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in Privasys remote attestation clients allowed attackers to impersonate TLS endpoints by forging evidence, a issue resolved in the latest release.
A critical flaw in Privasys Go allowed attackers to relay enclave certificates across sessions. The vendor has released a fix in version 0.5.1.
A critical flaw in Privasys Enclave OS Virtual allowed attackers to relay attestation quotes, compromising confidential VM security.
A critical vulnerability in Privasys remote attestation TLS clients allowed attackers to relay quotes, bypassing security checks in versions prior to 0.5.0.
A critical vulnerability in the Privasys rustls library allows attackers to relay enclave quotes, compromising attestation integrity until version 0.8.1.
A missing TLS session binding in Privasys Enclave OS Mini allowed attackers to relay quotes and impersonate attested enclaves.