Researchers Developed New Cloud Hardware Attack
A custom device discovered by researchers can interfere with encrypted memory on Intel and AMD server platforms.
Updated on Oct. 11, 2026 in Cybersecurity
Live Poll
Do you trust that your cloud-based data is secure from physical hardware tampering?
Researchers have developed a hardware device called DDRop that exploits vulnerabilities in confidential cloud computing. The attack requires brief physical access to servers to manipulate memory operations, affecting both Intel and AMD systems.
Why it matters
The findings demonstrate that encryption is not sufficient if an attacker can manipulate the underlying hardware. This vulnerability allows the compromise of virtual machine integrity even when data remains encrypted during processing.
The DDRop device interferes with physical memory write operations by targeting the hardware layer. Researchers successfully tested the vulnerability against Intel TDX systems to manipulate virtual machine information.
The players
Durham University
Researchers at this institution contributed to the development of the attack hardware.
Intel
The technology giant received disclosure of the findings to issue security advisories for its affected platforms.
AMD
This semiconductor company was contacted by researchers regarding vulnerabilities affecting its confidential computing technologies.
The details
The device is physically installed on a server to interfere with memory writes, forcing virtual machines to operate on outdated data while remaining unaware of the manipulation. By targeting memory handling rather than decryption, the attack bypasses standard encryption protections and disrupts the attestation mechanisms of virtual machines.
Timeline
October 11, 2026: The research findings regarding the DDRop device were published.
The Tech Race
This exploit targets the Intel TDX confidential computing architecture, revealing a new frontier in the battle between hardware security and physical access attacks. It highlights a critical gap in the industry as manufacturers strive to secure cloud workloads against increasingly sophisticated hardware-level threats.
Cloud computing users and enterprise administrators should note that securing physical server access is critical to preventing this class of attack. While the exploit requires physical hardware installation, it underscores the need for rigorous data center security protocols for all confidential workloads.
The takeaway
The DDRop research serves as a reminder that hardware-level security is as vital as software encryption in cloud environments. Organizations should prioritize physical security measures to protect server infrastructure from unauthorized hardware tampering.
Further reading
Learn more about the latest research and industry responses in the Cybersecurity section.
Source note: This article includes information reported by IHLS.
Live Poll
Do you trust that your cloud-based data is secure from physical hardware tampering?
