> TritonInfoSec News
Home / Sep 30, 2026 / Story
0
#3 BleepingComputer general September 29, 2026 at 17:10 UTC

New Spectre v2 attack variant leaks Linux root password hash in minutes

By Bill Toulas

AI Summary

Researchers from VUSec and Scuola Superiore Sant'Anna disclosed a new Spectre v2 variant called Branch Target Reuse (BTR) that can recover Linux root password hashes on Intel CPUs in 3–5 minutes on average, bypassing existing defenses. The attack targets JIT compilers in web browsers, language runtimes, and the OS kernel, affecting Intel, AMD, and Arm processors. The technique works despite current Spectre v2 mitigations, requiring security teams to evaluate exposure across affected platforms.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 88.0/100

# More from September 30

  1. 1
    Hackers exploit Citrix NetScaler zero-day to deploy web shells BleepingComputer
  2. 2
    Apple patches CoreGraphics zero-day flaw exploited in attacks BleepingComputer
  3. 4
    French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks The Hacker News
  4. 5
    Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor The Hacker News
  5. 6
    FBI tells ShinyHunters members to turn themselves in after recent arrest BleepingComputer
  6. 7
    Pentagon Personnel Agency Data Breach Impacts 3 Million People SecurityWeek
  7. 8
    JadePuffer agentic AI attacks target Azure, destroy cloud resources BleepingComputer
  8. 9
    Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials The Hacker News
  9. 10
    Misconfigured Supabase apps expose data in over 16,000 databases BleepingComputer