AI and Tech Summaries - AI Weekly Malaysia

Summaries

Short AI and tech summaries with source links, signal scores, and why each update matters for builders, founders, and Malaysian tech workers.

Window

Today Yesterday This week Last week This month Last month All time

Showing 1-1 of 1 results

Date	Provider	Score	Summary
30 Sep 2026, 1:20 AM	The Hacker News	6.0	New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses Researchers from VUSec and Scuola Superiore Sant'Anna disclosed a new Spectre-v2 variant called Branch Target Reuse (BTR), which exploits stale indirect branch prediction entries that survive JIT code cache rewrites, creating a transient execute-after-free primitive. They confirmed it affects SpiderMonkey (Firefox's JIT), GraalVM, and the Linux kernel's cBPF JIT, with different exploitability and leakage rates across the three. Two end-to-end Linux kernel proof-of-concept exploits recovered the root password hash within minutes on a fully patched Intel system with default protections enabled. The text names no CVE, no vendor patch, and no mitigation. Why: There is no patch or CVE in this disclosure, so the only decisions available to you right now are posture ones: if you run multi-tenant Linux hosts, shared CI runners, or container platforms where untrusted code and your secrets coexist on the same CPU, this is a same-machine leak path that default protections did not stop in the researchers' test. The kernel cBPF JIT can be turned off (net.core.bpf_jit_enable=0) as a blunt lever, but the same stale-branch-target class also hits browser and JVM-style JITs you can't disable for your users, so watch for vendor guidance rather than assuming your current hardening covers it. spectre cpu-security linux-kernel jit vulnerability

Date

Provider

Score

Summary

30 Sep 2026, 1:20 AM

The Hacker News

6.0

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses

Researchers from VUSec and Scuola Superiore Sant'Anna disclosed a new Spectre-v2 variant called Branch Target Reuse (BTR), which exploits stale indirect branch prediction entries that survive JIT code cache rewrites, creating a transient execute-after-free primitive. They confirmed it affects SpiderMonkey (Firefox's JIT), GraalVM, and the Linux kernel's cBPF JIT, with different exploitability and leakage rates across the three. Two end-to-end Linux kernel proof-of-concept exploits recovered the root password hash within minutes on a fully patched Intel system with default protections enabled. The text names no CVE, no vendor patch, and no mitigation.

Why: There is no patch or CVE in this disclosure, so the only decisions available to you right now are posture ones: if you run multi-tenant Linux hosts, shared CI runners, or container platforms where untrusted code and your secrets coexist on the same CPU, this is a same-machine leak path that default protections did not stop in the researchers' test. The kernel cBPF JIT can be turned off (net.core.bpf_jit_enable=0) as a blunt lever, but the same stale-branch-target class also hits browser and JVM-style JITs you can't disable for your users, so watch for vendor guidance rather than assuming your current hardening covers it.