{"id":242322,"date":"2026-08-07T01:18:00","date_gmt":"2026-08-07T06:18:00","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/08\/new-tontou-cpu-attack-bypasses-spectre-v2-fixes-leaks-linux-password-hashes"},"modified":"2026-08-07T01:18:00","modified_gmt":"2026-08-07T06:18:00","slug":"new-tontou-cpu-attack-bypasses-spectre-v2-fixes-leaks-linux-password-hashes","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/08\/new-tontou-cpu-attack-bypasses-spectre-v2-fixes-leaks-linux-password-hashes","title":{"rendered":"New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/new-tontou-cpu-attack-bypasses-spectre-v2-fixes-leaks-linux-password-hashes.jpg\"><\/a><\/p>\n<p>Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines.<\/p>\n<p>The method works against Spectre v2 defenses on AMD and Intel processors that rely on sanitizing or isolating branch predictors, which researchers generically refer to as neutralization-based mitigations.<\/p>\n<p>Spectre v2 is also known as Branch Target Injection (BTI) and is a variant of the Spectre class of vulnerabilities.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines. The method works against Spectre v2 defenses on AMD and Intel processors that rely on sanitizing or isolating branch predictors, which researchers generically refer to as neutralization-based mitigations. Spectre v2 [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1523],"tags":[],"class_list":["post-242322","post","type-post","status-publish","format-standard","hentry","category-computing"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=242322"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/242322\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=242322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=242322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=242322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}