Breach404
Back to Insights
Secure Software2 min readAugust 6, 2026

New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes

Researchers have discovered a new CPU vulnerability called TONTOU that circumvents existing Spectre v2 protections and can be exploited to steal sensitive data like Linux password hashes from vulnerable systems. You should monitor your systems for patches

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site - headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now - It's Free