New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks
New Spectre v2 variant, Branch Target Reuse (BTR), affects Intel, AMD, and Arm CPUs, enabling data leaks.
Researchers have discovered a new Spectre v2 variant called Branch Target Reuse (BTR) that impacts Intel, AMD, and Arm processors. This vulnerability targets Just-In-Time (JIT) compilers in operating systems, browsers, and runtimes, potentially allowing attackers to steal sensitive data like password hashes by hijacking speculative execution. Exploits have been demonstrated against the Linux kernel, and attacks from malicious websites are considered feasible.
AI summary of the linked source. Not reviewed by an editor. How this works
Run SpiderMonkey?
Get an email when a new story names SpiderMonkey, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Branch Target Reuse (BTR) variant of Spectre v2 exploits a fundamental design flaw in speculative execution — a performance optimization built into modern CPUs from Intel, AMD, and Arm. By manipulating JIT compilers in browsers, operating systems, and runtimes, attackers can hijack the CPU's branch prediction mechanisms to read sensitive memory contents such as password hashes. This vulnerability is particularly dangerous because it can be triggered remotely via malicious websites, requiring no physical access or elevated privileges. The fact that this class of vulnerability persists years after the original Spectre disclosure highlights how hardware-level design weaknesses are extraordinarily difficult to fully remediate, often requiring layered mitigations across firmware, OS, and application stacks.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- mitre_attack — T1003