2024-07-01 · HN #49811429
Data-Only Attacks Exploit Trusted Code by Corrupting Its Inputs
USENIX authors describe Einstein, a tool that searches for simple paths from attacker-controlled memory to sensitive operating-system calls. The result sharpens a key security question: why control-flow defenses may miss attacks that never execute attacker-supplied code.
