
Georgia Institute of Technology researchers have presented two whitepapers on Data Speculation Attacks viaLoad Address Prediction on Apple Silicon (SLAP) and Breaking the Apple M3 CPU via False Load Output Predictions (FLOP).
These Apple CPU flaws stem from faulty speculative execution and have the potential of putting web browsers at risk via malicious JavaScript or WebAssembly. So far Apple has yet to mitigate these issues even with being disclosed to the company last year.
Those wanting to learn more about these new Apple CPU side-channel attacks can do so via the FLOP and SLAP whitepapers on predictors.fail .