Get the latest tech news
New speculative attacks on Apple CPUs
The SLAP and FLOP Address and Value Prediction Attacks
While cached copies of previously visited websites may be present in the web browser, it is difficult to automatically detect malicious code patterns that exploit hardware vulnerabilities. Here, we show that the LVP allows us to run a function with the wrong arguments (e.g., pointer instead of integer), again resulting in a type confusion based primitive for reading arbitrary memory addresses. On the other hand, FLOP is a speculative type confusion attack that causes the CPU to bypass integrity checks on data structures, resulting in memory read primitives from arbitrary addresses in Safari and Chrome.
Or read this on Hacker News