Eight years after Spectre exposed a fundamental tension at the heart of modern computing, MIT researchers have found that the defenses built in response carry a flaw of their own — a nanosecond-wide gap between when a processor cleans up sensitive prediction data and when it actually uses it. Named TONTOU, the attack exploits this almost imperceptible window to re-poison the very machinery chip makers thought they had secured. The discovery is less a story of a single vulnerability than a reminder that the trade-off between speed and security, baked into processor design decades ago, continues
Tech Edition
· Aug 10, 2026
· security
· 4 min de lectura
High
Verificación: Verificado
MIT researchers discover TONTOU, a Spectre variant bypassing Intel and AMD CPU defences
◉
Science & Space
6405 artículos relacionados
South Korean satellite captures SpaceX rocket's lunar impact crater
Google News · 100% coincidencia
South Korean Satellite Captures First Images of SpaceX Rocket Crater o…
Google News · 99% coincidencia
Euclid's Galactic Preview Supercharges NASA's Roman Telescope Mission
Phys.org · 99% coincidencia
SpaceX rocket debris creates lunar crater; NASA studies impact afterma…
Google News · 99% coincidencia
South Korean satellite documents SpaceX rocket's unintentional lunar i…
Google News · 99% coincidencia
Cobertura Relacionada
BBC News · Aug 13
Eclipse dominates UK front pages as papers celebrate 'once in a generation' celestial event
A rare solar eclipse across the UK and Europe captures headlines with dramatic imagery and public celebration, while new…
The New York Times · Aug 13 Total Eclipse Sweeps Across Europe From Iceland to SpainA total solar eclipse crossed Europe from Iceland to Spain, drawing crowds to viewing locations as the moon completely b…
Times of India · Aug 13 Total solar eclipse returns to Spain after 121 years, mesmerizes EuropeA total solar eclipse crossed Spain and Iceland on Wednesday, marking Western Europe's first since 1999 and Spain's firs…
e-flux.com · Aug 13 M-Cult announces 2026–27 artist residencies with open call for Nordic-Baltic creatorsM-Cult opens residency programs in Helsinki with selected international artists exploring urban nature and technology, p…
Sesgo y Encuadre
⚖
Article presents technical security research with balanced language, though framing emphasizes vulnerability discovery over practical risk context.
Bias Direction
center
Confidence
MED
Technical threat amplification: leads with 'bypassing defenses' headline while burying practical exploitation difficulty in summary. Uses dramatic naming (TONTOU) and emphasizes persistence of threats without proportional discussion of real-world risk.
persistent security concern
ways around protections
small windows that may be exploitable
sensitive information
traces can potentially be measured
Intel/AMD official response or comment on the findings
Quantified practical risk assessment or exploitation difficulty beyond 'difficult'
Timeline for potential patches or mitigations
Comparison of TONTOU severity to other known Spectre variants
Industry security expert independent analysis of real-world threat level
Impacto Geopolítico
🌎
MIT researchers discovered TONTOU, a Spectre variant exploiting CPU timing gaps in Intel/AMD defenses, with limited practical impact but significant implications for processor security architecture.
Escalation Risk
moderate
Confidence
MED
United States
European Union
China
Taiwan
Global technology sector
Reinforces U.S. technological leadership in security research while exposing vulnerabilities in Intel and AMD products, potentially benefiting competitors and state-sponsored actors. Highlights dependence on U.S. academic institutions for critical infrastructure security validation.
Similar to the original Spectre disclosure (2018), which triggered geopolitical tensions over processor security and supply chain vulnerabilities, affecting U.S.-China tech competition.
Lente Económico
📈
MIT researchers discovered TONTOU, a Spectre variant exploiting CPU timing gaps in Intel/AMD defenses, raising cybersecurity costs but with limited immediate practical impact on markets.
Market Signal
mixed
Confidence
MED
Semiconductor Manufacturing
Cybersecurity Services
Cloud Computing
Enterprise Software
Data Centers
Minimal immediate impact. Consumers face no direct exploitation risk as practical exploitation remains difficult. Long-term: potential for higher IT security costs passed to consumers through cloud services and software subscriptions.
Likely to accelerate regulatory scrutiny of CPU security standards; may prompt government-mandated security certifications for processors; potential pressure on Intel/AMD for faster patching cycles; possible cybersecurity compliance requirements for critical infrastructure operators.