{
  "id": 267954,
  "title": "MIT boffins' TONTOU attack slips through Spectre defenses on Intel and AMD CPUs",
  "url": "https://urgent.news/2026/08/07/mit-boffins-tontou-attack-slips-through-spectre-defenses-on-intel-and",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-07T14:15:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/08/07/mit-boffins-tontou-attack-slips-through-spectre-defenses-on-intel-and-amd-cpus/5284081"
  },
  "original_language": "en",
  "account": "Two MIT researchers from the Computer Science and Artificial Intelligence Laboratory (CSAIL) have unveiled a new type of speculative execution attack called TONTOU, short for Time-of-Neutralization to Time-of-Use. This attack exploits a window of opportunity after processors neutralize potentially dangerous branch predictor states, allowing attackers to re-poison the branch predictor and leak sensitive data. The researchers, Daniël Trujillo and Mengjia Yan, demonstrated that the TONTOU attacks work on both Intel and AMD processors, targeting mitigations designed to protect against Spectre-style attacks. By injecting unprivileged programs with high-frequency timer interrupts during the post-neutralization window, the attackers can divert control flow to execute an interrupt handler that re-poisons branch predictor structures like the return stack buffer (RSB) or branch history buffer (BHB). This causes protected branches to speculatively jump to a disclosure gadget, leaking kernel data through side channels. The researchers showed that their attacks worked on Intel Cascade Lake Refresh and Arrow Lake processors and AMD Zen 2 and Zen 4 chips. They also managed to break Linux's kernel address space layout randomization (KASLR) and locate specific secrets like the etc/shadow file, which contains the root password hash. While the attack is not simple and took about 18 minutes to execute, it is practical and can affect multi-tenant container platforms where ordinary user space programs share the kernel with victims. Intel and AMD have not committed to addressing the issue with kernel patches, though AMD stated it would develop a response.",
  "summary": "MIT researchers Daniël Trujillo and Mengjia Yan have developed a new speculative execution attack that can bypass defenses against Spectre v2, which they call TONTOU, for Time-of-Neutralization to Time-of-Use. The attack targets mitigations designed to neutralize potentially hostile branch predictor states before sensitive code runs, but it shows that attackers can re-poison the branch predictor during the post-neutralization window. The researchers demonstrated that their attack works on both Intel and AMD-based Linux systems, using an interrupt injection primitive to trigger interrupts during the post-neutralization window and divert control flow to leak kernel data through a side channel. However, practical attacks are difficult and the researchers note that each end-to-end attempt took about 18 minutes.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register",
        "title": "MIT boffins' TONTOU attack slips through Spectre defenses on Intel and AMD CPUs",
        "url": "https://urgent.news/2026/08/07/mit-boffins-tontou-attack-slips-through-spectre-defenses-on-intel-and-270646",
        "published": "2026-08-07T14:15:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}