Flutterby™! : Security Exploits for the new year

python sweetness: The mysterious case of the Linux Page Table Isolation patches in which it is posited that there's a major security issue in all modern CPU architectures that the maintainers of the NT and Linux kernels are currently rolling out fixes for, but that the fixes are probably going to have huge performance impacts.

And these are likely related to the Rowhammer issues in modern SDRAM.

... And ...

IOHIDeous, a fascinating deep dive:

This is the tale of a macOS-only vulnerability in IOHIDFamily that yields kernel r/w and can be exploited by any unprivileged user.