The bug allows attackers to swipe data from a CPU’s registers. […] the exploit doesn’t require physical hardware access and can be triggered by loading JavaScript on a malicious website.

  • mitch@beehaw.org
    link
    fedilink
    arrow-up
    15
    ·
    11 months ago

    This is shaping up to be a real mess, a ton of companies are looking at whole fleet upgrades if they don’t wanna wait around for patches.

    This is why you have especially generous bug bounty programs folks. :(