Tag
A personal essay by a scholar recounting the discovery of an Intel Hyper-Threading cache side-channel that could leak RSA private key bits, and the six-month responsible disclosure process that led to coordinated patches across major OS vendors in 2005.
VUSec presents Branch Target Reuse (BTR), a new Spectre-v2 attack exploiting stale branch predictor entries in JIT engines (cBPF, GraalVM, SpiderMonkey) across Intel, AMD, and ARM CPUs, including an end-to-end Linux kernel exploit that bypasses existing mitigations to leak kernel memory.
AgentTell introduces a 20-scenario, 100-task benchmark showing that browser-use agents leak secrets learned on one website through their actions on another in 61.1% of sessions, often falsely assuring users the secret was not disclosed.
This research exposes side-channel vulnerabilities in file notification systems across Linux, Android, Windows, and macOS, allowing attackers to reconstruct user behavior with only read permissions. Accepted at ACM CCS 2026, it demonstrates severe platform-specific issues like keystroke timing leakage on Linux and private communication exposure on Android.
FLINT is a black-box framework that fingerprints FL model architectures (CNN, RNN, Transformer) using only 5G PHY-layer scheduling metadata, achieving 0.930 macro F1-score on an over-the-air testbed.
A new technique called FROST exploits SSD timing side channels in browsers to spy on users' activities, identifying open websites and apps without requiring any interaction beyond visiting a malicious site.
SPEAKE(a)R demonstrates a technique to convert speakers into microphones for covert audio eavesdropping by exploiting the electromechanical properties of speaker components, presenting both a security vulnerability and proof-of-concept attack methodology.