Researchers determine old vulnerabilities pose real-world threat to sensitive data in public clouds

Researchers presented a practical attack called "L1TF Reloaded" that reuses a seven-year-old transient-execution CPU vulnerability to realistically leak private data from public clouds; they tested on dedicated hosts in Google Cloud and AWS, coordinated disclosure led to patches and bounties, and the report warns that partial mitigations leave cloud fleets with older CPUs exposed.