Loading story…
Researchers disclosed DDrop, an active DDR5 hardware-interposer attack that drops selected memory writes so stale encrypted memory values can be accepted as current. The flaw affects Intel TDX, Intel Scalable SGX, and AMD SEV-SNP because their scalable memory-encryption architectures do not provide memory-freshness protection. Demonstrated impacts include protected-VM memory disclosure, activation of Intel TDX debug mode, and forgery of launch-attestation measurements; on AMD SEV-SNP, researchers copied data between victim pages through page relocation.
Exploitation requires an attacker to already control software on the target and obtain brief physical access to install a sub-$200 interposer, and no exploitation beyond laboratory testing has been reported. Organizations using confidential-computing workloads, including confidential VMs, should assess physical-access controls and attestation trust assumptions: the issue is architectural, has no straightforward software patch, and may require configuration or software mitigations that increase attack difficulty.
See affected versions and whether adversaries are exploiting it.
4 events from the most recent confirmed update back to the earliest known activity.
The DDRop project published materials for reproducing its DDR5 interposer attacks, including PCB and injection-controller designs, Teensy firmware, host evaluation tools, and proof-of-concept components targeting Intel TDX, Intel Scalable SGX, and AMD SEV-SNP. The materials document write-dropping, rank-swapping, page-relocation, and SEPT-injection attack capabilities requiring compatible DDR5 server hardware and custom physical equipment.
Intel said it is evaluating architectural hardening and detection mechanisms for DDRop, while maintaining that physical-interposer attacks are outside its cloud threat model. AMD likewise deemed the scenario outside its threat model and stated that no mitigation is planned.
On Intel TDX, researchers demonstrated protected-VM memory disclosure, debug-mode activation with plaintext-memory copying, and launch-attestation measurement forgery. On AMD SEV-SNP, they demonstrated copying data between victim pages during page relocation; Intel and AMD acknowledged the coordinated disclosure and said physical-access attacks are outside their stated threat models.
Researchers from KU Leuven, ETH Zurich, Durham University, and Google disclosed DDRop, an active DDR5 interposer attack that drops memory writes and can cause stale encrypted data to be accepted as current. The architectural freshness-protection issue affects Intel TDX, Intel Scalable SGX, and AMD SEV-SNP; the researchers reported no evidence of exploitation outside laboratory testing.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
8 references tracked. Mallory keeps watching after this page renders.
theregister.com
Open sourcethehackernews.com
Open sourceddropattack.eu
Open sourcegithub.com
Open sourceintel.com
Open sourcetee.fail
Open sourcelearn.microsoft.com
Open sourceddropattack.eu
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Researchers from KU Leuven and the University of Birmingham have demonstrated new physical attacks that undermine the security guarantees of trusted execution environments (TEEs) provided by Intel and AMD processors. These TEEs, specifically Intel's Software Guard Extensions (SGX) and AMD's Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP), are widely used in cloud computing to protect sensitive data and operations from attackers, even those with administrative access to the underlying infrastructure. The attacks, named Battering RAM and Wiretap, exploit vulnerabilities in the deterministic encryption schemes used by both SGX and SEV-SNP. By inserting a low-cost hardware interposer—costing as little as $50—between the CPU and DDR4 memory modules, attackers can observe and manipulate encrypted data in real time. The Battering RAM attack allows adversaries to not only view but also modify encrypted data, enabling the introduction of software backdoors or data corruption within protected enclaves. The Wiretap attack, on the other hand, enables passive decryption of sensitive data without detection. These attacks are particularly concerning for cloud environments, where confidential computing workloads rely on hardware-level memory encryption to secure data from potentially untrusted cloud service providers. The interposer operates transparently during system startup, passing all trust checks, and can later be activated to redirect protected memory addresses to attacker-controlled locations. On Intel platforms, Battering RAM enables arbitrary read and write access to enclave memory, while on AMD systems, it bypasses recent firmware mitigations and allows the introduction of arbitrary backdoors into virtual machines. The attacks highlight fundamental limitations in the current design of hardware-based memory encryption, especially when deterministic encryption is used. All systems using DDR4 memory and relying on these TEEs for confidential computing are potentially vulnerable. The research underscores the need for more robust hardware security mechanisms and may prompt cloud providers and customers to reassess their trust in existing enclave technologies. The findings have significant implications for the security of cloud-hosted applications, including those used by messaging platforms like Signal and WhatsApp, which depend on these protections to safeguard user data. The attacks demonstrate that physical access to cloud hardware, even with minimal resources, can compromise the confidentiality and integrity of sensitive workloads. Both Intel and AMD are expected to review these findings and consider architectural changes or additional mitigations in future hardware generations. The research also raises questions about the adequacy of current cloud security recommendations and the potential for insider threats within data centers. Organizations relying on SGX or SEV-SNP for critical workloads should closely monitor vendor advisories and consider additional layers of defense. The academic community continues to play a vital role in uncovering and publicizing such vulnerabilities, driving improvements in hardware security.
Jun 29, 2026
Academic researchers from Georgia Tech, Purdue University, and Synkhronix have developed a side-channel attack named **TEE.Fail** that enables the extraction of secrets from trusted execution environments (TEEs) in modern CPUs, including Intel's SGX and TDX, AMD's SEV-SNP, and even Nvidia's GPU Confidential Computing. The attack leverages a memory-bus interposition technique on DDR5 systems, using off-the-shelf equipment costing under $1,000, to physically intercept and analyze encrypted memory traffic. This method allows attackers with physical access and root privileges to extract cryptographic keys and forge attestation, undermining the security guarantees of confidential computing environments. TEE.Fail is the first attack demonstrated against DDR5-based TEEs, extending previous DDR4-focused research such as WireTap and BatteringRAM. The researchers found that architectural changes in recent server-grade CPUs, specifically the adoption of deterministic AES-XTS encryption without memory integrity and replay protections, have introduced exploitable weaknesses. The attack's success highlights significant risks for organizations relying on hardware-based confidential computing, as it enables the compromise of sensitive data and secure workloads even on fully updated, trusted systems.
Jun 29, 2026
A critical vulnerability, identified as CVE-2025-0033 and dubbed RMPocalypse, has been discovered in AMD's Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP) technology. This flaw allows attackers to bypass the core security guarantees of SEV-SNP, which is designed to protect the confidentiality and integrity of virtual machines (VMs) even in hostile environments. Researchers from ETH Zürich revealed that the vulnerability stems from incomplete protections in the initialization of the Reverse Map Paging (RMP) table, a key data structure that stores security metadata for all DRAM pages in the system. The RMP table, which maps system physical addresses to guest physical addresses, is only partially protected during VM startup, creating a window of opportunity for exploitation. By performing a single, carefully crafted 8-byte memory write to the RMP table, an attacker can corrupt its contents, undermining the isolation between VMs and the hypervisor. This attack vector enables adversaries with sufficient access to bypass SEV-SNP's hardware-enforced boundaries, potentially gaining full control over encrypted VMs. The implications are severe: attackers could access sensitive data, activate hidden debug functions, forge attestation checks, and even perform replay attacks by restoring previous VM states. AMD has acknowledged the issue and released firmware updates to address the vulnerability, urging customers to apply the patches promptly. The flaw highlights a fundamental challenge in confidential computing, where the security of the underlying mechanisms is as critical as the protections they provide. The vulnerability is particularly concerning for cloud service providers and enterprises relying on SEV-SNP for secure multi-tenant environments. Security experts recommend immediate patching and a review of VM isolation strategies in light of this disclosure. The RMPocalypse flaw demonstrates that even advanced hardware-based security features can be undermined by subtle implementation oversights. The research underscores the importance of rigorous security validation for all components involved in confidential computing. Organizations are advised to monitor for further advisories from AMD and to assess the potential exposure of their virtualized workloads. The incident serves as a reminder that attackers continue to seek and exploit weaknesses in foundational security technologies. The public disclosure of RMPocalypse has prompted renewed scrutiny of hardware-assisted virtualization security. The vulnerability's exploitation requires a high level of technical skill but poses a significant risk to environments where SEV-SNP is deployed. AMD's response includes not only patches but also updated guidance for secure deployment of SEV-SNP-enabled systems. The security community is closely watching for any signs of exploitation in the wild following the release of technical details. This event is expected to influence future designs of confidential computing architectures across the industry.
Jun 29, 2026