Cloudflare Workers Spectre attack leaked a JWT at 12 bit/s: the 2026 DyPrIs failure
On 19 August 2026 Cloudflare published a remote Spectre attack that leaked a JWT from a co-located Worker at up to 12 bit/s. The 2021 attack managed 2 bit/min. The blog and the paper disagree on the risk.
