xenospectrum

BTR attack pulls Linux root password hash in minutes by abusing stale CPU branch predictions

Researchers disclosed Branch Target Reuse (BTR), an attack that exploits stale branch predictions left in the CPU after JIT code is reused. This article examines the Linux root-hash experiment, what ...

New Spectre v2 attack variant leaks Linux root password hash in minutes

A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running ...
The Hacker News

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Rejetto HFS CVE-2026-61500 faces exploitation attempts after a public PoC showed forged admin sessions can lead to remote code execution.
cyberpress

Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code

Horizon3.ai researchers used Anthropic's Mythos model to find a cryptographic weakness in Rejetto HTTP File Server (HFS), tracked as CVE-2026-61500. The flaw lets an unauthenticated attacker forge ...