#leaks.


New Spectre v2 attack variant leaks Linux root password hash in minutes

Sep 29, 2026 // 20:17

A new Spectre v2 attack variant called Branch Target Reuse (BTR) can recover root password hashes from Intel computers running Linux in just a few […]

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses

Sep 29, 2026 // 20:00

A group of academics from VUSec and Scuola Superiore Sant’Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines […]

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Sep 14, 2026 // 11:51

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. […]

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

Aug 25, 2026 // 01:33

A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. […]

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Aug 19, 2026 // 23:59

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in […]

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Aug 19, 2026 // 23:58

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in […]

New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes

Aug 7, 2026 // 01:17

Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines. […]

ShinyHunters data leaks fuel $2,000 sextortion email scam

Jul 25, 2026 // 18:37

Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sextortion emails demanding $2,000 in Bitcoin. The […]

Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks

Jul 14, 2026 // 14:57

Researchers at KU Leuven tested 85 of the most popular crypto wallets that run as browser extensions and found that the wallets themselves leak enough […]

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Jul 10, 2026 // 16:46

Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fail […]

1 2 Next