Security & privacy
A revisit of remote Spectre attacks on Cloudflare Workers
Cloudflare re-examined Spectre-style side-channel attacks against its Workers platform and found that its 2021 defense (DyPrIs) had a limitation, allowing researchers to leak data at up to 12 bit/s with 99% accuracy in production. Cloudflare says the flaw is already mitigated via an upgraded DyPrIs plus V8 Sandbox and in-process isolation, and found no evidence of real-world exploitation over three years.