NewsBleepingComputer2026-09-29 17:10 UTC
New Spectre v2 attack variant leaks Linux root password hash in minutes
Teaser from the source
A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3-5 minutes on average. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputer →More on password
Other advisories
- CVE-2026-91973mediumVikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords
- CVE-2026-91973noneVikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords
- CVE-2026-62376highVikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access
- CVE-2026-62376noneVikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access
- ghsa:GHSA-68w4-83fh-f2w8highpyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password
- osv:GHSA-68w4-83fh-f2w8nonepyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password
- osv:GHSA-jq7h-wrvp-3rgxnonepyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
- ghsa:GHSA-jq7h-wrvp-3rgxhighpyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
Other news entries
- Newssecurityweek2026-10-10Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
- Newssecurityweek2026-10-08FortiBleed Attackers Locking Victims Out of Fortinet Devices
- Newsthehackernews2026-09-29French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
- Newsbleepingcomputer2026-09-28Over 16,000 Supabase databases expose PII, passwords, auth tokens
- Newsthehackernews2026-09-24TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
- Newsthehackernews2026-09-23MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key
- Newsthehackernews2026-09-23This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
- Newsbleepingcomputer2026-09-22Rogue external MFA providers can steal passwords during logins
ID