Google Cloud Security and Intel conducted a five-month joint security assessment of Intel Trust Domain Extensions (TDX) 1.5, focusing specifically on advanced new capabilities for confidential...
Read summary & article →Rowhammer remains one of the most stubborn and persistent physical hardware vulnerabilities in modern Dynamic Random-Access Memory (DRAM). By repeatedly activating ("hammering") specific memory rows,...
Read summary & article →It’s been almost three years since I reported the Downfall vulnerability (also called Gather Data Sampling) to Intel, and its mitigation is still hurting the performance of real workloads. One of the...
Read summary & article →Published on the ACM SIGARCH Computer Architecture Today blog, this article examines the lasting paradigm shift in computer architecture following the disclosure of Meltdown, Spectre, and the...
Read summary & article →Co-authored on the Google Online Security Blog, this post details the coordinated disclosure, ecosystem impact, and collaborative industry remediation of two critical processor vulnerabilities...
Read summary & article →