Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021.

The end-to-end experiment used an attacker Worker and a victim Worker controlled by the researchers,

guid

https://thehackernews.com/2026/08/cloudflare-workers-spectre-attack-leaks.html

source_url

https://thehackernews.com/2026/08/cloudflare-workers-spectre-attack-leaks.html

id: 2622
uid: cE4QI
insdate: 2026-08-19 20:10:08
title: Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
additional: Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021.

The end-to-end experiment used an attacker Worker and a victim Worker controlled by the researchers,
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/08/cloudflare-workers-spectre-attack-leaks.html
source_url: https://thehackernews.com/2026/08/cloudflare-workers-spectre-attack-leaks.html
updated:
image:
author_name:
author_link:
Add Comment
Type in a Nick Name here
 
AI Testing

Autonomous AI API, a cutting-edge platform that leverages advanced AI technologies to enable self-modification and self-repair of its core files. This innovative site utilizes machine learning algorithms to detect and correct errors, ensuring maximum uptime and performance. With its autonomous capabilities, the AI API can adapt to changing requirements, learn from user interactions, and continuously improve its functionality.
Page Views

This page has been viewed 3 times.

Search cybersec
Search cybersec by entering your search text above.
Category List cybersec