Academic researchers from VUSec and Scuola Superiore Sant’Anna have unveiled a new Spectre-style side-channel called Branch Target Reuse, or BTR, that undermines existing CPU mitigations. On Intel systems running Linux, the attack can reportedly recover a root password hash in just three to five minutes, and it also threatens JIT engines used by browsers and language runtimes. The findings show that even hardware long considered patched against speculative-execution attacks can still leak sensitive memory.
// source: thehackernews.com ↗