← Back to Feed
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
August 6, 2026 · BleepingComputer · Severity: HIGH
Researchers discovered a new CPU attack called TONTOU that bypasses recent Spectre v2 mitigations. The attack exploits speculative execution to leak sensitive data, including password hashes, from Linux machines.
Key Takeaways
- Researchers developed TONTOU, a CPU attack bypassing Spectre v2 fixes. The exploit leaks secrets, including password hashes, from Linux systems. Speculative execution side-channel attacks remain difficult to fully mitigate.