Spectre has been haunting CPU security since 2018, and MIT researchers have now found another way to make it misbehave. The new TONTOU attack can bypass some of the defenses Intel and AMD have added over the years by exploiting a tiny gap in how those protections work. The research comes from Daniël Trujillo and Mengjia Yan at MIT’s Computer Science and Artificial Intelligence Laboratory (CSAIL). Their findings show that even after a processor wipes or isolates information used by its branch predictor, there can be a brief window before that information is actually used. TONTOU, short for Time-of-Neutralization to Time-of-Use, attacks precisely that gap.
To understand TONTOU, it helps to understand what makes Spectre attacks possible in the first place. Modern CPUs use speculative execution to predict what software will do next and start working ahead of time. When that prediction turns out to be wrong, the processor discards the result, but traces of that activity can remain inside the CPU and potentially leak information through side channels.
After Spectre emerged, chipmakers introduced defenses designed to clean or isolate the processor’s branch predictor, which helps the CPU guess where code will execute next. The idea is straightforward: remove anything an attacker may have planted before sensitive code runs. The problem, according to MIT’s researchers, is that the cleanup and the moment the prediction machinery is actually used cannot happen at exactly the same time, leaving a tiny “post-neutralization window.” TONTOU targets that gap by injecting a carefully timed interrupt and poisoning the predictor again.
The researchers tested TONTOU on Intel Cascade Lake Refresh and Arrow Lake, as well as AMD Zen 2 and Zen 4 processors, and were able to trigger the necessary branch mispredictions on both platforms. AMD’s Safe RET defense leaves a particularly tiny window, just two instructions wide and typically lasting tens of nanoseconds, but the researchers were still able to hit it by manipulating processor timing. Their technique, called interrupt injection, essentially schedules high-frequency timer interrupts and attempts to land one inside that window, allowing the attacker to poison structures such as the return stack buffer (RSB) or branch history buffer (BHB).
This isn’t purely theoretical. On an AMD Zen 2 system running a stock Linux kernel, the researchers built a complete end-to-end exploit that broke Linux’s kernel address space layout randomization (KASLR) in all 10 attempts. They were also able to locate and leak /etc/shadow, which contains root password hashes, in five of those runs. However, the attack isn’t exactly a speed demon: MIT measured the protected-memory read rate at roughly five bytes per second, while The Register reports that each complete exploit attempt took around 18 minutes and required specific software conditions on Intel.
In other words, TONTOU is a sophisticated attack that demonstrates a real weakness, but it isn’t something ordinary malware can casually throw at a random PC.
The good news is that this isn’t an unpatched zero-day waiting to eat your PC. Trujillo and Yan notified AMD and Intel in February, and Linux kernel maintainers in March. AMD subsequently released a kernel patch that mitigates the attack, so keeping Linux updated is particularly important. Intel, meanwhile, told the researchers it doesn’t plan additional mitigations, arguing that real-world exploitation depends on too many factors, including the availability of suitable disclosure gadgets. Intel did, however, award the researchers a bug-bounty payment.
The bigger takeaway is less “your Intel or AMD PC is about to be hacked” and more that Spectre-style attacks remain a stubborn problem at the hardware level. TONTOU shows that even carefully designed defenses can leave tiny windows that researchers may eventually find a way to exploit. For most desktop users, this is not an immediate reason to panic. But for shared systems, cloud infrastructure, and multi-tenant environments where untrusted code runs alongside other workloads, the research is a useful reminder that the Spectre saga is far from over.
Speech-to-text apps have flooded the App Store, making it easier than ever to type on our Macs with just our voice. I have previously covered one such app called TypeWhisper. However, there has been a dearth of good text-to-speech models, and most of the good ones are locked behind a subscription.
Ollama, an open-source app that lets you run local AI models on your computer, wants to change that. It works on macOS, Windows, and Linux, and your prompts are never stored or used for training.
Did you think hitting delete on your AI chatbot conversation actually makes it disappear? Georgia Tech researchers just proved that's not entirely true. They have built a forensic tool called ORISA that can dig deleted conversations from your phone and even rebuild them into a working chatbot session you can keep talking to.
How can ORISA bring deleted AI conversations back?
Touchscreen laptops have been around for years. You can get them in all sizes and shapes. Just not from Apple. For years, the Cupertino giant has treated the idea of a touchscreen MacBook the way I treat a meeting that could have been an email: with open contempt. However, Wednesday looks like the day the company could finally change its mind.
The latest Apple invite puts the “Pro and Tell” showcase in Los Angeles at 10 a.m. PT (1 p.m. ET) on October 28, 2026. Instead of a regular live-streamed keynote, it is an invitation-only, hands-on event for a handful of press and creators (similar to what the company did for the MacBook Neo earlier this year).