35
35
30
60
55
30
Cloudflare Workers Spectre Attack Leaks JWT From Co
Researchers demonstrated a remote Spectre attack leaking a JWT between co-located Cloudflare Workers at 12 bits per second, 360x the 2021 rate.
Security researchers showed a remote Spectre attack against Cloudflare Workers that leaked a JWT from a co-located Worker at up to 12 bits per second with 99.16% accuracy, 360 times the 2021 demonstration rate. The attack exploited weaknesses in DyPrIs dynamic process isolation, where long-lived Durable Object invocations could run before isolation and WebSocket-heavy I/O suppressed the branch-misprediction signal. Cloudflare deployed improved DyPrIs, the V8 Sandbox, and MPK-based in-process isolation, and found no indicators of active exploitation over three years.
58
35
30
30
30
50
30
35
60
60
35
55
60
60
35
30
30
35
60
A revisit of remote Spectre attacks on Cloudflare Workers
Cloudflare details its 2024-2025 reassessment of remote Spectre attacks on Workers, covering new attack primitives and hardened defenses.
Cloudflare reassessed the feasibility of remote Spectre attacks against its Workers serverless infrastructure across 2024 and 2025. The write-up describes new attack primitives including Spectre gadgets, remote timers, and techniques for achieving co-location with victim workloads. It also explains new defenses that further harden Cloudflare Workers against speculative-execution side channels.
48
35
50
30
45
30
30
55
60
30
60
55
35
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
Cisco Talos identifies UAT-10147 deploying the SPECTRE implant with cross-platform C2, credential theft, and kernel-level EDR bypass.
Cisco Talos reports that the tracked threat actor UAT-10147 is deploying a newly identified implant named SPECTRE. SPECTRE supports cross-platform command-and-control, process injection, credential theft, and anti-analysis protections. It also includes a Linux rootkit and BYOVD (bring your own vulnerable driver) capability enabling kernel-level EDR bypass, marking an evolution in commodity intrusion tooling.
50
60