AI Weekly Malaysia

A single-instruction exploit targeting AMD's 2015-era 15h and 16h CPU families can unlock secret memory areas, granting access to the Platform Security Processor, microcode, and System Management Interface for full hardware-level control. The article text itself is mostly site boilerplate with no additional technical detail beyond the headline.

Why: Only relevant if you operate infrastructure on AMD 15h/16h-era CPUs (roughly 2011-2017). If you do, this is a physical-access or privileged-instruction escalation path into secure coprocessor and microcode regions, meaning standard OS-level patching may be insufficient. For cloud or modern-hardware users, no action needed.

Researchers from Germany's Helmholtz Center for Information Security found that Chinese Loongson processors (pre-3A6000) have leaky L1 data caches exploitable via an architectural flaw in the LoongArch ISA, allowing unprivileged attackers to recover kernel AES keys, root password hashes, and bypass ASLR within seconds—even from inside a VM. Software mitigations are not possible; affected users must either replace the chip or evict private data from L1 cache (costing ~1.4% performance), which can require disabling hyperthreading.

Why: Almost certainly irrelevant to Malaysian builders unless you are running workloads on Loongson hardware or evaluating it for procurement. The practical takeaway is narrow: if you are sourcing Loongson chips for cost or sovereignty reasons, only buy the 3A6000 or later, and treat earlier models as unfixable for multi-tenant or VM workloads.