
Side-Channel Attacks: Langer EM Probes and CPA
March 2, 2026 #embedded security #attacks #research
Evaluation of various Langer EMV-Technik probes for side-channel attacks using Correlation Power Analysis (CPA) on an ATxmega128D4 microcontroller.

Evaluation of various Langer EMV-Technik probes for side-channel attacks using Correlation Power Analysis (CPA) on an ATxmega128D4 microcontroller.

StackWarp (CVE-2025-29943) is a vulnerability affecting AMD SEV that enables malicious hypervisors to tamper with encrypted virtual machines. This article recounts how recognizing a familiar exploitation pattern allowed us to quickly identify a promising attack path and build a working data-only exploit. The second half provides a technical overview of the sudo exploitation technique.

From December 6, 2025, the NIS2 Implementation Act strengthens cybersecurity.

On November 25-26, 2025, the German OWASP Day takes place at the Radisson Blu Conference Hotel in Düsseldorf. SCHUTZWERK has been a regular sponsor of this independent conference for application security since 2016, bringing together security experts, developers, and IT decision-makers. Tickets are still available. More information and registration: god.owasp.de/ 2025 The Conference The first day (November 25) is designed as a training day. Two workshops run in parallel in the morning: “Leveraging Browser Features for Proactive Defense” by Javan Rasokat and the “Workshop Cyber Resilience Act” by Michael Helwig.