New DDRop Attack Compromises Intel TDX and AMD SEV-SNP Confidential Computing

A recent discovery by researchers has unveiled a significant hardware vulnerability known as DDRop, which undermines the memory safeguards in Intel's TDX and AMD's SEV-SNP confidential computing technologies. This attack operates by stealthily dropping write operations to a server's memory, leading the processor to continue reading outdated encrypted data as if it were current. For the attack to be successful, the perpetrator must already have control over the server's software and gain temporary physical access to the machine to install a small circuit. This vulnerability poses serious implications for the integrity of confidential computing environments, as it could allow unauthorized access to sensitive information without detection. As organizations increasingly rely on these technologies to protect their data, understanding and mitigating such vulnerabilities becomes crucial.