New attack named SnailLoad allows a remote attacker to infer websites and videos viewed by a user without direct access to network traffic.
The post New SnailLoad Attack Relies on Network Latency Variations to Infer User Activity appeared first on SecurityWeek.
Researchers detail GoFetch, a new side-channel attack impacting Apple CPUs that could allow an attacker to obtain secret keys.
The post New ‘GoFetch’ Apple CPU Attack Exposes Crypto Keys appeared first on SecurityWeek.
New iLeakage side-channel speculative execution attack exploits Safari to steal sensitive information from Macs and iPhones.
The post iLeakage Attack Exploits Safari to Steal Sensitive Data From Macs, iPhones appeared first on SecurityWeek.
GPUs from AMD, Apple, Arm, Intel, Nvidia and Qualcomm are vulnerable to a new type of side-channel attack named GPU.zip.
The post New GPU Side-Channel Attack Allows Malicious Websites to Steal Data appeared first on SecurityWeek.
A new power side-channel attack named Collide+Power can allow an attacker to obtain sensitive information and it works against nearly any modern CPU.
The post Nearly All Modern CPUs Leak Data to New Collide+Power Side-Channel Attack appeared first on SecurityWeek.
The framework helps evaluate the effectiveness of obfuscation side-channel mitigation schemes against data leaks.
The post New MIT Framework Evaluates Side-Channel Attack Mitigations appeared first on SecurityWeek.
