Brendan Eich

Update Der Technikchef und Entwickler der Programmiersprache Javascript, Brendan Eich, übernimmt die Führung bei Mozilla. Er ...
PC Watch

rootハッシュ漏洩の脅威。JITを狙うSpectre-v2新手法「BTR」とは

CPUの投機実行における脆弱性「Spectre-v2」の亜種である「Branch Target Reuse(BTR)」が報告された。アムステルダム自由大学のセキュリティ研究チームであるVUSecが9月29日に発表したもので、JIT(Just-in-Time)コンパイラに対して悪用することで、機密データの窃取などを可能にするとしている。
xenospectrum

BTR attack pulls Linux root password hash in minutes by abusing stale CPU branch predictions

Researchers disclosed Branch Target Reuse (BTR), an attack that exploits stale branch predictions left in the CPU after JIT code is reused. This article examines the Linux root-hash experiment, what ...
cyberpress

PS5 Relapse Exploit Chains WebKit and Kernel Flaws to Gain Kernel Read/Write Access

A newly published PlayStation 5 exploit chain, dubbed Relapse, combines a WebKit browser vulnerability with a kernel-level use-after-free race condition to obtain kernel read/write access on PS5 ...
SecurityWeek

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks

Researchers from the VUSec group have disclosed Branch Target Reuse (BTR), a new Spectre v2 attack targeting JIT compilers in ...

New Spectre v2 attack variant leaks Linux root password hash in minutes

A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running ...
blog.csdn

V8 跨引擎测试指南：使用 JSVU 安装并运行多 JavaScript 引擎

【免费下载链接】v8 The official mirror of the V8 Git repository 项目地址: https://gitcode.com/gh_mirrors/v81/v8 JSVU（JavaScript engine Version Updater ...
Help Net Security

Most of the bugs Claude Mythos found have never been checked by a human

Anthropic pointed Claude Mythos Preview at 281 open-source projects and collected 23,019 candidate vulnerabilities. External security firms reviewed 1,900 of them. Maintainers received 1,596 reports ...
cyberpress

Firefox JIT Flaw Lets Hackers Compromise Tor Browser Users Through Malicious Websites

A single malicious webpage is enough to compromise Tor Browser users running an unpatched build, following the disclosure of CVE-2026-10702, a high-severity Firefox JavaScript engine vulnerability ...
cybersecuritynews

Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page

A single malicious webpage is enough to compromise Tor Browser users running an unpatched build, following newly disclosed research into CVE-2026-10702. The flaw, a high-severity Firefox JavaScript ...
BleepingComputer

Malicious sites use JavaScript to build malware in browser memory

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. The operation has been ...