1 day ago · SLAP, or Data Speculation Attacks via Load Address Prediction, functions by exploiting Apple Silicon's Load Address Predictor, which guesses the next memory address the CPU will use. By exploiting ...

1 day ago · SLAP & FLOP attacks exploit Apple M-series speculative execution flaws, leaking emails, location data, and credit cards via Safari and Chrome. ... The attacks have been codenamed Data Speculation Attacks via Load Address Prediction on Apple Silicon and Breaking the Apple M3 CPU via False Load Output Predictions . Apple was notified of the ...

1 day ago · “SLAP: Data Speculation Attacks via Load Address Prediction on Apple Silicon” Authors: Jason Kim, Daniel Genkin, Yuval Yarom 2025. We present SLAP, a new speculative execution attack that arises from optimizing data dependencies, as opposed to control flow dependencies. More specifically, we show that Apple CPUs starting with the M2/A15 are ...

20 hours ago · SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac, iPad Silicon. 11. ... and phones powered by Cupertino's homegrown Silicon processors can be exploited to reveal email content, browsing behavior, and other sensitive data through two newly identified side-channel attacks on Chrome and Safari. On Tuesday, ...

2 hours ago · The "SLAP" attack paper's moniker is derived/abbreviated from its long-form title: "Data Speculation Attacks via Load Address Prediction on Apple" Silicon. A similarly uncatchy acronymization has been generated by the second paper's full title: "Breaking the Apple M3 CPU via F alse L oad O utput P redictions"—aka "FLOP" attack.

1 day ago · Apple was informed about the findings in May 2024 (SLAP) and September 2024 (FLOP), but the company does not appear too concerned. In a statement, the tech giant thanked the researchers and acknowledged that their proof-of-concept advances the company’s understanding of these types of threats, but noted that based on its analysis it does not believe these attacks pose an immediate risk to users.

1 day ago · For example, it could read your emails, see your location in Apple Maps, see your banking details, and so on. FLOP can do the same thing, but is more powerful, working with Chrome as well as Safari.

2 days ago · The researchers disclosed the flaws to Apple on March 24, 2024 (SLAP) and September 3, 2024 (FLOP). Apple acknowledged the shared proof-of-concept and stated it plans to address the issues.

2 days ago · SLAP abuses the LAP feature found in newer Apple silicon to perform a similar data-theft attack. By forcing LAP to predict the wrong memory address, SLAP can perform attacker-chosen computations ...

2 days ago · Apple is set to release iOS 18.3 next week, bringing further refinements to Apple Intelligence features, a couple of neat new capabilities to iPhone 15 Pro and iPhone 16 devices, and bug fixes.