Modern integrated graphics processing units, including those manufactured by AMD, Arm, Apple, Intel, Qualcomm, and Nvidia, could be targeted to expose sensitive data through the new GPU.zip side-channel attack, which exploits graphical data compression, The Hacker News reports. Exploitation of the iGPU-based compression channel could allow threat actors to conduct cross-origin pixel theft in Google Chrome and Microsoft Edge, which have SVG filters, reported researchers from the University of Texas at Austin, University of Illinois Urbana-Champaign, University of Washington, and Carnegie Mellon University.

Source: SC Magazine