Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021. The end-to-end experiment used an attacker Worker and a victim Worker controlled by the researchers,
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
TA

taylor??

3h ago
0 0

Discussion

Don’t hold back—comment!

Don’t wait—start sharing your ideas now!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
Rogue ransomware affiliate poses as recovery firm to steal paym…

A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters, " contacting the victims before the attacks become public a…
Thanakorn Boon

Thanakorn Boon

3h ago
0
darkreading.com
SilkParasite Threatens Central Asian Orgs With Flurry of RATs

A spear-phishing campaign by a Chinese-nexus group linked to FamousSparrow provides insight into geopolitical, technical, and strategic global moves by China's…
DR

Dark Reading

3h ago
0
darkreading.com
China-Linked Hacker Shows AI Capabilities in APAC Attack

In the first purported "near-autonomous" attack on a nation-state, a Chinese-language operator used a complex AI framework to target and compromise g…
DR

Dark Reading

13h ago
0
bleepingcomputer.com
Clop created custom web shell for Windchill data theft attacks

A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to de…
MB

Maria Bakker

1d ago
0
thehackernews.com
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate…

Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pul…
Rosa Martinez

Rosa Martinez

1d ago
0
thehackernews.com
AI "Mind Viruses" Can Spread Between Agents Through Persistent …

Security researchers at Anthropic and Switzerland's EPFL have demonstrated that self-propagating payloads can spread from one artificial intelligence (AI) agen…
Nirano

Nirano

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate…

Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pul…
Rosa Martinez

Rosa Martinez

1d ago
0
thehackernews.com
AI "Mind Viruses" Can Spread Between Agents Through Persistent …

Security researchers at Anthropic and Switzerland's EPFL have demonstrated that self-propagating payloads can spread from one artificial intelligence (AI) agen…
Nirano

Nirano

1d ago
0
thehackernews.com
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser…

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) ca…
JA

jordan af

1d ago
0
thehackernews.com
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attacker…

GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under…
TN

The Hacker News

1d ago
0
thehackernews.com
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Comma…

Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-con…
TN

The Hacker News

2d ago
0
thehackernews.com
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Br…

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions beca…
JA

jordan af

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest