TEE.Fail Side-Channel Attack Compromises Confidential Computing on DDR5 Systems

Researchers disclosed **DDrop**, an active DDR5 hardware-interposer attack that drops selected memory writes so stale encrypted memory values can be accepted as current. The flaw affects Intel TDX, Intel Scalable SGX, and AMD SEV-SNP because their scalable memory-encryption architectures do not provide memory-freshness protection. Demonstrated impacts include protected-VM memory disclosure, activation of Intel TDX debug mode, and forgery of launch-attestation measurements; on AMD SEV-SNP, researchers copied data between victim pages through page relocation. Exploitation requires an attacker to already control software on the target and obtain brief physical access to install a sub-$200 interposer, and no exploitation beyond laboratory testing has been reported. Organizations using confidential-computing workloads, including confidential VMs, should assess physical-access controls and attestation trust assumptions: the issue is architectural, has no straightforward software patch, and may require configuration or software mitigations that increase attack difficulty.

Sep 15, 2026

Physical Attacks Bypass Intel SGX and AMD SEV-SNP Trusted Enclave Protections

Researchers from KU Leuven and the University of Birmingham have demonstrated new physical attacks that undermine the security guarantees of trusted execution environments (TEEs) provided by Intel and AMD processors. These TEEs, specifically Intel's Software Guard Extensions (SGX) and AMD's Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP), are widely used in cloud computing to protect sensitive data and operations from attackers, even those with administrative access to the underlying infrastructure. The attacks, named Battering RAM and Wiretap, exploit vulnerabilities in the deterministic encryption schemes used by both SGX and SEV-SNP. By inserting a low-cost hardware interposer—costing as little as $50—between the CPU and DDR4 memory modules, attackers can observe and manipulate encrypted data in real time. The Battering RAM attack allows adversaries to not only view but also modify encrypted data, enabling the introduction of software backdoors or data corruption within protected enclaves. The Wiretap attack, on the other hand, enables passive decryption of sensitive data without detection. These attacks are particularly concerning for cloud environments, where confidential computing workloads rely on hardware-level memory encryption to secure data from potentially untrusted cloud service providers. The interposer operates transparently during system startup, passing all trust checks, and can later be activated to redirect protected memory addresses to attacker-controlled locations. On Intel platforms, Battering RAM enables arbitrary read and write access to enclave memory, while on AMD systems, it bypasses recent firmware mitigations and allows the introduction of arbitrary backdoors into virtual machines. The attacks highlight fundamental limitations in the current design of hardware-based memory encryption, especially when deterministic encryption is used. All systems using DDR4 memory and relying on these TEEs for confidential computing are potentially vulnerable. The research underscores the need for more robust hardware security mechanisms and may prompt cloud providers and customers to reassess their trust in existing enclave technologies. The findings have significant implications for the security of cloud-hosted applications, including those used by messaging platforms like Signal and WhatsApp, which depend on these protections to safeguard user data. The attacks demonstrate that physical access to cloud hardware, even with minimal resources, can compromise the confidentiality and integrity of sensitive workloads. Both Intel and AMD are expected to review these findings and consider architectural changes or additional mitigations in future hardware generations. The research also raises questions about the adequacy of current cloud security recommendations and the potential for insider threats within data centers. Organizations relying on SGX or SEV-SNP for critical workloads should closely monitor vendor advisories and consider additional layers of defense. The academic community continues to play a vital role in uncovering and publicizing such vulnerabilities, driving improvements in hardware security.

Oct 1, 2025

Hardware-Based Attacks on Secure Enclaves and Embedded Devices

Security researchers have demonstrated new hardware-based techniques to extract sensitive data from devices previously considered secure, including smartwatches and confidential computing servers. In one case, analysts revived the 'Blinkenlights' technique, adapting it to modern TFT screens to extract firmware from a budget smartwatch by exploiting a dial parser vulnerability. This allowed arbitrary memory content to be displayed on the device's screen, which was then captured using a high-speed Raspberry Pi Pico setup. The smartwatch, which contained fake health sensors and used a JieLi AC6958C6 system-on-chip, was found to have weak authentication and a flawed firmware parser, enabling the out-of-bounds read attack. Separately, researchers from KU Leuven University presented a low-cost hardware attack called 'Battering RAM' at Black Hat Europe 2025, which targets secure CPU enclaves such as Intel SGX and AMD SEV. By using a $50 DDR4 interposer, the researchers manipulated memory address mapping at runtime, bypassing firmware mitigations and gaining unauthorized access to encrypted memory. This allowed them to extract platform provisioning keys, forge attestation reports, and implant persistent backdoors on protected virtual machines, raising concerns about the security of cloud infrastructures relying on these technologies.

Dec 12, 2025

TEE.Fail Side-Channel Attack Compromises Confidential Computing on DDR5 Systems

How this story unfolded

TEE.Fail attack details are publicly disclosed

Researchers develop TEE.Fail DDR5 side-channel attack on TEEs

Related entities

Organizations

Sources

See the full picture, correlated to your attack surface.

TEE.Fail Side-Channel Attack Compromises Confidential Computing on DDR5 Systems

How this story unfolded

TEE.Fail attack details are publicly disclosed

Researchers develop TEE.Fail DDR5 side-channel attack on TEEs

Related entities

Organizations

Sources

See the full picture, correlated to your attack surface.

TEE.Fail Side-Channel Attack Compromises Confidential Computing on DDR5 Systems

How this story unfolded

TEE.Fail attack details are publicly disclosed

Researchers develop TEE.Fail DDR5 side-channel attack on TEEs

Related entities

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

DDrop Hardware Attack Undermines Intel TDX and AMD SEV-SNP Confidential VMs

Physical Attacks Bypass Intel SGX and AMD SEV-SNP Trusted Enclave Protections

Hardware-Based Attacks on Secure Enclaves and Embedded Devices

TEE.Fail Side-Channel Attack Compromises Confidential Computing on DDR5 Systems

How this story unfolded

TEE.Fail attack details are publicly disclosed

Researchers develop TEE.Fail DDR5 side-channel attack on TEEs

Related entities

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

DDrop Hardware Attack Undermines Intel TDX and AMD SEV-SNP Confidential VMs

Physical Attacks Bypass Intel SGX and AMD SEV-SNP Trusted Enclave Protections

Hardware-Based Attacks on Secure Enclaves and Embedded Devices