Urgent.News

One page, thousands of outlets. See who else covered it.

Editions

Tech

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021. The end-to-end experiment used an attacker Worker and a victim Worker controlled by the researchers,

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

We haven't written up this one. The Hacker News has the full story — the link below goes straight to it.

Read the original at thehackernews.com →

More in Tech

The Cognito war stories: four ways it breaks an MCP server, and the fix for each

If you are putting Amazon Cognito behind a remote MCP server, here are four specific ways it will break the connector before you ever reach your own code - each with the symptom, the reason, and the…

  • Cognito rejects RFC 8707 resource indicators, breaking MCP server authentication
  • Cognito access tokens lack aud claim, complicating audience validation
  • Managed Login v2 requires client branding styles, causing login page unavailability

More from Wednesday 19 August →