side-channel
2 live · 4 on record · last incident 1 day ago
Live2
- livePolicySniff: Inferring Agent Policy States through Shared-GPU Execution
Research · since 13 Nov 2026
Researchers introduced PolicySniff, a side-channel attack that infers an LLM agent's approval-policy state through shared-GPU execution and timing analysis. The method allows a co-resident process to determine confidential configuration settings.
AI - liveAMD SEV-SNP Mior and Skyfall Attacks Target AMD SEV-SNP VMs
Research · since 13 Nov 2026
Researchers disclosed two attacks, Mior and Skyfall, allowing a rogue cloud host to read data inside AMD SEV-SNP-protected virtual machines. Mior can also modify VM memory and forge signed execution reports given host and BIOS control.
Earlier2
- closed3.1vLLM vLLM tool continuations drop cache_salt to restore prefix-cache oracle
Patch now · Disclosed · since 5 Oct 2026 · updated 6 Oct 2026 · CVE-2026-105752
AI - closed2.6vLLM CVE-2025-46570: Timing Side-Channel in vLLM Prefix Caching
Patch now · Disclosed · since 28 May 2025 · updated 29 May 2025 · CVE-2025-46570
AI