Latest Speculative Execution news

New ARM 'TIKTAG' attack impacts Google Chrome, Linux systems

A new speculative execution attack named "TIKTAG" targets ARM's Memory Tagging Extension (MTE) to leak data with over a 95% chance of success, allowing hackers to bypass the security feature.
- Bill Toulas
- June 16, 2024
- 10:16 AM
- 1
New Spectre v2 attack impacts Linux systems on Intel CPUs

Researchers have demonstrated the "first native Spectre v2 exploit" for a new speculative execution side-channel flaw that impacts Linux systems running on many modern Intel processors.
- Bill Toulas
- April 10, 2024
- 01:19 PM
- 2
New SLAM attack steals sensitive data from AMD, future Intel CPUs

Academic researchers developed a new side-channel attack called SLAM that exploits hardware features designed to improve security in upcoming CPUs from Intel, AMD, and Arm to obtain the root password hash from the kernel memory.
- Bill Toulas
- December 06, 2023
- 07:52 PM
- 0
New iLeakage attack steals emails, passwords from Apple Safari

Academic researchers created a new speculative side-channel attack they named iLeakage that works on all recent Apple devices and can extract sensitive information from the Safari web browser.
- Bill Toulas
- October 26, 2023
- 07:26 AM
- 2
New Inception attack leaks sensitive data from all AMD Zen CPUs

Researchers have discovered a new and powerful transient execution attack called 'Inception' that can leak privileged secrets and data using unprivileged processes on all AMD Zen CPUs, including the latest models.
- Bill Toulas
- August 08, 2023
- 11:00 AM
- 5
Zenbleed attack leaks sensitive data from AMD Zen2 processors

Google's security researcher Tavis Ormandy discovered a new vulnerability impacting AMD Zen2 CPUs that could allow a malicious actor to steal sensitive data, such as passwords and encryption keys, at a rate of 30KB/sec from each CPU core.
- Bill Toulas
- July 24, 2023
- 05:28 PM
- 1
Intel CPUs vulnerable to new transient execution side-channel attack

A new side-channel attack impacting multiple generations of Intel CPUs has been discovered, allowing data to be leaked through the EFLAGS register.
- Bill Toulas
- April 24, 2023
- 03:38 PM
- 0
VMware: 70% drop in Linux ESXi VM performance with Retbleed fixes

VMware is warning that ESXi VMs running on Linux kernel 5.19 can have up to a 70% performance drop when Retbleed mitigations are enabled compared to the Linux kernel 5.18 release.
- Bill Toulas
- September 12, 2022
- 11:33 AM
- 0
New Retbleed speculative execution CPU attack bypasses Retpoline fixes

Security researchers have discovered a new speculative execution attack called Retbleed that affects processors from both Intel and AMD and could be used to extract sensitive information.
- Ionut Ilascu
- July 14, 2022
- 03:13 AM
- 0
Intel, AMD, Arm warn of new speculative execution CPU bugs

Security researchers have found new a new way to bypass existing hardware-based defenses for speculative execution in modern computer processors from Intel, AMD, and ARM.
- Bill Toulas
- March 09, 2022
- 12:03 PM
- 3
Latest Intel CPUs Affected by New TSX Speculative Attack

A new speculative vulnerability called ZombieLoad 2, or TSX Asynchronous Abort, has been disclosed today that targets the Transactional Synchronization Extensions (TSX) feature in Intel processors.
- Lawrence Abrams
- November 13, 2019
- 03:15 AM
- 1
List of MDS Speculative Execution Vulnerability Advisories & Updates

Four new vulnerabilities have been discovered in Intel processors that can be exploited via speculative execution side-channel attacks called RIDL, Fallout, and ZombieLoad. These vulnerabilities allow attackers to steal passwords, cryptographic keys, or any other type of data to be loaded or stored in the memory of the CPU buffers.
- Lawrence Abrams
- May 14, 2019
- 08:57 PM
- 1
New RIDL and Fallout Attacks Impact All Modern Intel CPUs

Multiple security researchers have released details about a new class of speculative attacks against all modern Intel processors. The attacks are different from and more dangerous than Meltdown and Spectre and their variations because they can leak data from CPU buffers, which is not necessarily present in caches.
- Ionut Ilascu
- May 14, 2019
- 01:11 PM
- 9