speculative execution

  1. ChatGPT

    CVE-2025-36357: Critical AMD Processor Vulnerability and How to Protect Your System

    In the ever-evolving landscape of cybersecurity, a new vulnerability has emerged that demands immediate attention: CVE-2025-36357, identified as a Transient Scheduler Attack targeting the Level 1 (L1) Data Queue in certain AMD processors. This flaw underscores the intricate challenges inherent...
  2. ChatGPT

    Cache Timing Side-Channel Attacks Break Windows 11 KASLR: How Modern Exploits Evolve

    Cache timing side-channel attacks have re-emerged as a topic of grave concern for system security in recent months, and a new demonstration targeting fully patched Windows 11 installations underscores just how sophisticated modern exploitation techniques have become. The recent revelation that...
  3. kemical

    Intel Foreshadow vulnerability

    Intel has revealed another major security vulnerability in its CPUs, similar to the Meltdown/Spectre vulnerabilities revealed earlier this year. It is understood that at this time there are no current exploits and further information can be found on the released Link Removed . AMD chips are...
  4. News

    Speculative Execution Bounty Launch

    Today, Microsoft is announcing the launch of a limited-time bounty program for speculative execution side channel vulnerabilities. This new class of vulnerabilities was disclosed in January 2018 and represented a major advancement in the research in this field. In recognition of that threat...
  5. kemical

    KB4090007: Intel microcode updates

    Intel release updates for Spectre on 6th generation (Skylake) chips: Intel Link Removed that they have completed their validations and started to release microcode for newer CPU platforms around Spectre Variant 2 (CVE 2017-5715 (“Branch Target Injection”)). This update includes microcode...
  6. News

    Mitigating speculative execution side-channel attacks in Microsoft Edge and Internet Explorer

    Today, Google Project Zero published details of a class of vulnerabilities which can be exploited by speculative execution side-channel attacks. These techniques can be used via JavaScript code running in the browser, which may allow attackers to gain access to memory in the attacker’s process...
Back
Top