Researchers say a cheap hardware add-on can tamper with encrypted server memory and expose data that confidential-computing systems are supposed to protect. The DDRop attack uses a custom DDR5 interposer board to drop memory writes and replay stale encrypted data, breaking integrity guarantees in Intel TDX, Intel Scalable SGX, and AMD SEV-SNP. On a proof-of-concept Intel TDX server, the team says it could force a protected virtual machine into debug mode, read plaintext memory, and forge attestation reports in under two minutes. No easy fix is available for current scalable memory-encryption designs.
Why it matters: This matters most to cloud providers and organizations relying on confidential virtual machines to protect sensitive workloads from a hostile host or physical tampering. The attack needs physical server access, so it is not a mass internet threat, but it weakens a key trust promise of modern confidential-computing platforms and may require hardware redesigns, deployment reviews, and stronger physical protections.
2026.09.14
100% relevant
This article establishes a distinct new hardware attack, dubbed DDRop, with named affected platforms, attack method, proof-of-concept results, and practical impact on confidential-computing trust and attestation.
← Back to all stories