"Zenbleed" bug affects all Zen 2-based Ryzen, Threadripper, and EPYC CPUs.

The bug allows attackers to swipe data from a CPU’s registers. […] the exploit doesn’t require physical hardware access and can be triggered by loading JavaScript on a malicious website.

  •  mitch   ( @msprout@beehaw.org ) 
    15•11 months ago

    This is shaping up to be a real mess, a ton of companies are looking at whole fleet upgrades if they don’t wanna wait around for patches.

    This is why you have especially generous bug bounty programs folks. :(