gcdRadar

side-channel

2 live · 4 on record · last incident 1 day ago

Dec ’25records per month, by first reportNov ’26

Live2

  1. live
    PolicySniff: Inferring Agent Policy States through Shared-GPU Execution

    Research · since 13 Nov 2026

    Researchers introduced PolicySniff, a side-channel attack that infers an LLM agent's approval-policy state through shared-GPU execution and timing analysis. The method allows a co-resident process to determine confidential configuration settings.

    AI
  2. live
    AMD SEV-SNP Mior and Skyfall Attacks Target AMD SEV-SNP VMs

    Research · since 13 Nov 2026

    Researchers disclosed two attacks, Mior and Skyfall, allowing a rogue cloud host to read data inside AMD SEV-SNP-protected virtual machines. Mior can also modify VM memory and forge signed execution reports given host and BIOS control.

Earlier2

  1. closed3.1
    vLLM vLLM tool continuations drop cache_salt to restore prefix-cache oracle

    Patch now · Disclosed · since 5 Oct 2026 · updated 6 Oct 2026 · CVE-2026-105752

    AI
  2. closed2.6
    vLLM CVE-2025-46570: Timing Side-Channel in vLLM Prefix Caching

    Patch now · Disclosed · since 28 May 2025 · updated 29 May 2025 · CVE-2025-46570

    AI