pentester.land· Sep 8, 2021· by Ayush Agarwal, Sioli O'Connell, Jason Kim, Shaked Yehezke, Daniel Genkin, Eyal Ronen, Yuval Yarom

Spook.js: Attacking Google Chrome's Strict Site Isolation via Speculative Execution and Type Confusion

Open Original Article ↗
Target Program: Google
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Browser hacking#Side-channel attack#Site Isolation bypass