Spectre Returns via JIT Compiler Attack

Researchers from Vrije Universiteit and Scuola Superiore Sant'Anna demonstrated Branch Target Reuse, a practical Spectre v2 attack on Intel-based Linux systems that leaks password hashes at up to 5.7 KB/sec. Linux kernel and Oracle released patches; two CVEs were assigned. Mozilla is focusing on site isolation. The peer-reviewed paper will appear at ACM CCS 2026 in The Hague.