Release of a Technical Report into Intel Trust Domain Extensions
Summary: Google Project Zero and Google Cloud released a report on a security review of Intel's Trust Domain Extensions (TDX), a feature that provides hardware isolation of virtual machine guests at runtime by securing resources such as guest physical memory. Conducted with Intel engineers on pre-release source code for TDX version 1.0, the review found 10 confirmed security vulnerabilities, all fixed before final release, and identified 5 additional areas for defense-in-depth changes in subsequent versions.
Key Takeaway: Ten confirmed vulnerabilities were found in the code underlying TDX shipping in limited SKUs of 4th Generation Intel Xeon Scalable CPUs, and the fixes landed only because outside researchers reviewed pre-release source with Intel before products shipped.
Read the original at Google Project Zero ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026The Last List of 2009 - Predicting Security in 2010 Cyber Risks ·