New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who already controls the server's software and can briefly access the machine to insert a small circuit

Fact: Researchers disclosed a new hardware attack named DDRop that can break memory protection in Intel TDX and AMD SEV-SNP confidential computing by silently dropping memory writes, causing processors to keep reading stale encrypted data while the attacker must already control the server software and briefly access the machine to add a small circuit. Fact: This undermines the integrity guarantees of confidential computing environments that many AI workloads rely on, even though the attacker prerequisites are non-trivial. RealGround analysis: Organizations using confidential computing for AI models and data should treat DDRop as a supply chain and infrastructure integrity risk, ensuring hardware security assumptions are revisited and threat models account for physical and privileged attackers. RealGround analysis: Security teams should incorporate hardware-level attack scenarios into AI readiness assessments and SBOM-style inventories, verifying where confidential computing is used for AI and planning compensating controls such as tamper-resistant hosting, tighter access controls, and continuous integrity monitoring.