tag: Spectre-V2 · 3 items
- Engineer — Learn: Novel BTR side-channel technique bypasses existing Spectre v2 mitigations on Intel/Linux; no patch or KEV listed yet, but architects running bare-metal Linux servers should monitor for mitigations and evaluate whether eIBRS/retpoline configurations need revisiting.
- SOC/IR — Learn: No IOCs or active exploitation reported; this attack requires local execution context, limiting detection surface — worth understanding as a privilege-escalation technique for future hunt hypotheses.
- Leader — Skip
- Engineer — Learn: Novel speculative-execution research affecting JIT-heavy runtimes and the kernel across multiple CPU vendors — no enrichment signals (no KEV, PoC, or EPSS) and no concrete patch yet, so no immediate action; worth tracking for upcoming OS/microcode mitigations.
- SOC/IR — Skip
- Leader — Skip
- Engineer — Learn: MIT CSAIL research shows a timing gap in branch-predictor sanitization can be re-poisoned by a local unprivileged process, defeating default Spectre v2 mitigations on AMD Zen 2 and Intel; no patch or workaround is available yet, but engineers running multi-tenant Linux workloads should track vendor microcode and kernel responses as they emerge.
- SOC/IR — Skip
- Leader — Skip