As cited
Copy frozen at (site build).
vulnerabilities
New hardware device can RAM into encrypted memory, expose your data
Researchers from KU Leuven, ETH Zurich, Durham University, and Google demonstrated a hardware attack called DDRop that exploits memory encryption weaknesses in confidential computing systems. The attack uses a custom circuit board costing under $200 to intercept and drop writes to encrypted memory, allowing attackers with physical access to read protected data and forge attestation reports. The vulnerability affects Intel TDX, Scalable SGX, and AMD SEV-SNP implementations, with no straightforward fix available from vendors.
Why it matters: Cloud service providers and enterprises using confidential virtual machines for sensitive workloads face a risk if attackers gain physical access to servers, requiring security review of data center physical access controls and threat modeling assumptions.
- Source published
- First seen by Cybersecurity Tracker