About Me
Hi! I am a 4th-year PhD student in the VUSec group in Amsterdam. My research focus is microarchitectural security.
Research Interests
I study how modern CPUs can be exploited through microarchitectural attacks, such as Spectre, and how operating-systems, cloud vendors, and software in general can better defend against them.
More broadly, I am interested in systems and cloud security, program and binary analysis, side channels, and memory-safety.
Publications
2026
Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries.
Wiebing, S.; Yuhui, Z.; Biondi, A.; and Giuffrida, C.
In CCS, 2026.
PaperWebCode
2025
Training Solo: On the Limitations of Domain Isolation Against Spectre-v2 Attacks.
Wiebing, S.; and Giuffrida, C.
In IEEE S&P, 2025.
CSAW Best Paper Award Runner-up, Intel Bounty Reward
PaperWebCode
2024
InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2.
Wiebing, S.; de Faveri Tron, A.; Bos, H.; and Giuffrida, C.
In USENIX Security, 2024.
Distinguished Paper Award, DCSR Paper Award Runner-up
PaperWebCodeVideo
Leaky Address Masking: Exploiting Unmasked Spectre Gadgets with Noncanonical Address Translation.
Hertogh, M.; Wiebing, S.; and Giuffrida, C.
In S&P, 2024.
PaperWebCode
Practical Impact
Linux kernel
IBPB on BPF JIT region reuse
CVE-2026-64507
Linux advisory
BPF JIT spraying hardening
CVE-2026-64508
Linux advisory
ITS Indirect branch thunks
CVE-2024-28956
Linux docsIntel ITS guidance
BHB clearing / IBHF at the end of cBPF programs
Patch (BHB clearing)Patch (IBHF)
BHB clearing at syscall entry
CVE-2024-2201
Patches
Intel
Microcode update
CVE-2024-28956
INTEL-SA-01153Intel ITS guidance
Microcode update
CVE-2025-24495
INTEL-SA-01322
New x86 instruction (IBHF)
Intel guidance
Hardware control (BHI_DIS_S)
CVE-2024-2201
Intel BHI guidance
Other software
JIT code-cache randomization in GraalVM
GraalVM patch
s.j.wiebing [at] vu.nl