Researchers have devised a new attack that allows unprivileged code running on computers to steal secrets stored in what should be protected memory regions. The attack is possible because of a known design issue exploited in the past to modify protected data. Using the new technique, the researchers were able to extract an RSA 2048-bit signing key from an OpenSSH server using code running with user-level privileges. RAMBleed is a variation of another attack called Rowhammer that has been known for several years and which exploits the increased cell density in modern SDRAM memory chips.”]

