SecurityLobstersabout 2 hours ago
New Spectre-v2 Attack Hits JIT Engines
8 min read
Researchers disclosed Branch Target Reuse, a Spectre-v2 attack exploiting stale branch predictor entries in JIT compilers. They built end-to-end exploits against Linux cBPF, leaking 8 bytes per second and extracting the root password hash on Intel CPUs, bypassing all mitigations. Firefox's SpiderMonkey and Oracle's GraalVM are also affected. Linux and Oracle deployed fixes; Mozilla prioritizes site isolation.
Level
Hype check
Tap to vote and see what everyone thinks.
