New DDRop Attack Breaks Intel TDX and AMD SEV‑SNP Confidential Computing

The Hacker News reports that a team of security researchers has disclosed a novel hardware vulnerability dubbed DDRop, which targets the confidential computing technologies Intel Trust Domain Extensions (TDX) and AMD Secure Encrypted Virtualization‑SNP (SEV‑SNP). The attack subverts the core memory protection mechanisms designed to keep data encrypted and isolated from the host system.

DDRop operates by exploiting an attacker’s existing control over the server’s software stack and briefly inserting a small, custom circuit into the machine. This circuit silently drops write operations to the server’s memory, causing the processor to continue reading previously encrypted data as though it were the most recent version, effectively bypassing the intended confidentiality guarantees.

The discovery has significant implications for Australian enterprises and cloud providers that rely on confidential computing to protect sensitive workloads, such as government data, financial services, and health records. Organisations in Darwin and across Australia may need to reassess the security posture of their hardware platforms, ensure firmware is up‑to‑date, and consider additional hardware‑level monitoring to detect unauthorized modifications.

Industry experts advise that mitigation will likely involve firmware patches from Intel and AMD, as well as tighter supply‑chain controls to prevent the insertion of rogue circuitry. Security teams should also incorporate hardware‑focused threat modelling into their risk assessments to stay ahead of similar attacks.

For IT professionals and students looking to deepen their understanding of emerging hardware threats, Wepro Technology offers Security+ and specialised networking courses that cover the fundamentals of secure system design and the latest developments in confidential computing security.