Curated security research, vulnerabilities, advisories and tools for practitioners.

#side-channel

Security coverage tagged side-channel.

1.

Practical Side-Channel Attacks in Web Applications

blog | 2026-02-24 13:34 | blog.sentry.security | original ↗ | #pentesting | #web-security | #side-channel

2.

How we avoided side-channels in our new post-quantum Go cryptography libraries

blog | 2025-11-14 12:00 | blog.trailofbits.com | original ↗ | #open-source | #cryptography | #post-quantum

3.

A lesson on inference attacks

blog | 2025-10-16 12:00 | bugcrowd.com | original ↗ | #mobile-security | #privacy | #inference-attacks

4.

Project Rain:L1TF

blog | 2025-09-19 00:00 | bughunters.google.com | original ↗ | #mitigation | #side-channel | #google

5.

Beyond Sandbox Domains: Rendering Untrusted Web Content with SafeContentFrame

blog | 2025-09-18 00:00 | bughunters.google.com | original ↗ | #web-security | #xss | #side-channel

6.

Exploiting Retbleed in the real world

blog | 2025-08-07 00:00 | bughunters.google.com | original ↗ | #exploitation | #side-channel | #google

7.

Listen to the whispers: web timing attacks that actually work

research | 2024-11-18 08:32 | portswigger.net | original ↗ | #black-hat | #research | #tooling

8.

A few notes on AWS Nitro Enclaves: Attack surface

blog | 2024-09-24 13:00 | blog.trailofbits.com | original ↗ | #cloud | #cloud-security | #aws

9.

LeftoverLocals: Listening to LLM responses through leaked GPU local memory

vulnerability | 2024-01-16 17:00 | CVE-2023-4969 | blog.trailofbits.com | original ↗ | #ai-security | #llm | #gpu

10.

No More Speculation: Exploiting CPU Side-Channels for Real

blog | 2023-08-21 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #exploitation | #side-channel

11.

Redefining Impossible: XSS without arbitrary JavaScript

research | 2022-07-20 09:16 | portswigger.net | original ↗ | #web-security | #xss | #side-channel

12.

Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks

blog | 2022-07-05 17:00 | hackerone.com | original ↗ | #supply-chain | #threat-intelligence | #side-channel

13.

10 DEF CON 29 Security Talks to Watch

blog | 2021-07-27 00:00 | bishopfox.com | original ↗ | #conference | #def-con | #side-channel

14.

XS-Leak: Detecting IDs using Portal

research | 2020-09-08 12:26 | portswigger.net | original ↗ | #browser-security | #portswigger | #side-channel

15.

How a Security Anomaly was Accidentally Found in an EAL6+ JavaCard

research | 2020-05-11 22:00 | blog.quarkslab.com | original ↗ | #hardware | #side-channel | #timing-attack

16.

XS-Leak: Leaking IDs using focus

research | 2019-10-09 07:01 | portswigger.net | original ↗ | #browser-security | #portswigger | #side-channel

17.

Abusing Chrome's XSS auditor to steal tokens

research | 2019-06-14 12:02 | portswigger.net | original ↗ | #browser-security | #chrome | #side-channel

18.

Abusing jQuery for CSS powered timing attacks

research | 2019-05-29 12:10 | portswigger.net | original ↗ | #browser-security | #portswigger | #side-channel

19.

When SideChannelMarvels meet LIEF

research | 2018-05-02 22:00 | blog.quarkslab.com | original ↗ | #android | #cryptography | #side-channel

20.

An accessible overview of Meltdown and Spectre, Part 2

blog | 2018-03-22 10:50 | blog.trailofbits.com | original ↗ | #hardware-security | #meltdown | #spectre

21.

An accessible overview of Meltdown and Spectre, Part 1

blog | 2018-01-30 12:50 | blog.trailofbits.com | original ↗ | #cloud | #hardware-security | #meltdown

22.

Spectre is not a Bug, it is a Feature

research | 2018-01-16 23:00 | blog.quarkslab.com | original ↗ | #obfuscation | #spectre | #side-channel

23.

Hardware Side Channels in the Cloud

blog | 2015-07-21 11:50 | blog.trailofbits.com | original ↗ | #cloud | #cloud-security | #hardware-security