[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXEecq1Lp4i7pRjUImc6Fn9qm17mhH6KbpkO8GvV9Kwc":3},{"article":4,"iocs":55,"watch_terms":60,"solutions":61,"lesson":124},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"cd9efaee-c462-4c85-b25e-8b6aa1ff5d98","New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing","new-ddrop-attack-breaks-intel-tdx-and-amd-sev-snp-confidential-computing-d1e3ec","Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who already controls the server's software and can briefly access the machine to insert a small circuit","Researchers have disclosed a new hardware attack named DDRop that targets Intel TDX and AMD SEV-SNP confidential computing technologies. By using a custom-built interposer circuit, the attack silently drops writes to a server's memory, causing the processor to read outdated encrypted data, thereby breaking memory integrity and potentially allowing attackers to gain control of protected virtual machines.","New DDRop attack bypasses Intel TDX and AMD SEV-SNP confidential computing memory protections.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fnew-ddrop-attack-breaks-intel-tdx-and.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEi4IfzHWVZbbX-Jlw_WME4viVgnupLfVdkxzfZ0skzjQpB5I32f-nua5-Gt6UJGJ9-cwTyrHqaCxBFndtNkIFx_Tj9sf3LnxfrqlecJ0zh0N83i5YRdukZRTpTiUP-kVrkpF4gMJZN-tONZy7jjk2gqdq87ELsUHDlyjQDFCIX6Rioz3ljHItZ2IeLDqb-w\u002Fs1600\u002FDDRop.gif","2026-09-14T16:58:42+00:00","2026-09-14T18:00:05.940645+00:00",9,[17,20,22,24,27,29],{"name":18,"type":19},"Intel TDX","product",{"name":21,"type":19},"AMD SEV-SNP",{"name":23,"type":19},"Intel Scalable SGX",{"name":25,"type":26},"Confidential Computing","technology",{"name":28,"type":26},"DDR5",{"name":30,"type":31},"Google","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"0493c7e9-989a-4692-b4e6-136f5ec09675","Cryptography","cryptography",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56],{"type":57,"value":58,"context":59},"mitre_attack","T1560.001","Data Destruction: Archived by Attacker (related to memory manipulation)",[30,18,21],{"controls":62,"vendors":118},[63,92],{"slug":64,"name":65,"problem":66,"products":67},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[68,76,84],{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"slug":93,"name":94,"problem":95,"products":96},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[97,105,110],{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":106,"product_name":107,"url":108,"description":109},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",[119],{"slug":120,"name":30,"logo_path":121,"roles":122},"google","\u002Fvendor-logos\u002Fgoogle.png",[123],"reported_by",{"slug":125,"title":126,"body":127,"framework_refs":128,"framework_notes":140},"ddrop-hardware-attack-bypasses-confidential-computing-protections-in-intel-tdx-and-amd-sev-snp","DDRop Hardware Attack Bypasses Confidential Computing Protections in Intel TDX and AMD SEV-SNP","The DDRop attack exploits a physical hardware vulnerability by inserting a custom interposer circuit between the CPU and memory modules, silently dropping memory write operations so the processor reads stale, outdated encrypted data. This undermines the core integrity guarantees that confidential computing technologies like Intel TDX and AMD SEV-SNP are designed to provide, potentially allowing an attacker with physical or supply-chain access to hijack protected virtual machines. The attack is particularly dangerous in cloud and data center environments where tenants rely on hardware-enforced isolation to protect sensitive workloads from even privileged insiders. This highlights that cryptographic and software-layer protections are insufficient when physical hardware integrity cannot be guaranteed, making supply chain security and physical access controls critical.",[129,130,131,132,133,134,135,136,137,138,139],"NIST SP 800-161 (Supply Chain Risk Management)","NIST SP 800-193 (Platform Firmware Resiliency)","NIST CSF PR.DS-6 (Integrity Checking Mechanisms)","NIST CSF ID.SC-4 (Supply Chain Risk Assessment)","CIS Control 3: Data Protection","CIS Control 16: Application Software Security","CIS Control 18: Penetration Testing","ISO\u002FIEC 27001 A.11.2 (Physical Equipment Security)","ISO\u002FIEC 27001 A.15.1 (Supplier Relationships)","NIST SP 800-207 (Zero Trust Architecture — Physical Layer Assumptions)","TCG Trusted Platform Module (TPM) Remote Attestation Standards",{}]