A revisit of remote Spectre attacks on Cloudflare Workers
Cloudflare details its 2024-2025 reassessment of remote Spectre attacks on Workers, covering new attack primitives and hardened defenses.
Cloudflare reassessed the feasibility of remote Spectre attacks against its Workers serverless infrastructure across 2024 and 2025. The write-up describes new attack primitives including Spectre gadgets, remote timers, and techniques for achieving co-location with victim workloads. It also explains new defenses that further harden Cloudflare Workers against speculative-execution side channels.
- New attack primitives covered include Spectre gadgets and remote timing approaches
- Research examines how attackers achieve co-location with Workers workloads
- New defenses further harden Workers against Spectre-class side channels
- Vendors
- Cloudflare
- Products
- Cloudflare Workers
- Organizations
- Cloudflare
From the original article
In 2024 and 2025, we reassessed remote Spectre attacks on our Workers infrastructure. We share details about the new attack primitives like Spectre gadgets, remote timers, achieving co-location and how new defenses further harden Cloudflare Workers.
By Martin Schwarzl · blog.cloudflare.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.