Compromising Confidential Compute Through TDX Vulnerabilities - Security Research Analysis
Lead AI-Native Products with Microsoft's Agentic AI Program
Stuck in Tutorial Hell? Learn Backend Dev the Right Way
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore a 36-minute Black Hat conference talk that delves into critical vulnerabilities discovered in Intel's Trusted Domain Extensions (TDX) Confidential Compute technology. Learn about the internal workings of TDX and follow Microsoft security researchers' methodical review process, including their custom emulation tooling development and testing strategies. Discover how their initial findings led to the identification of critical security flaws that enable malicious cloud providers to bypass confidentiality and integrity protections, potentially compromising sensitive customer data like financial information, medical records, and proprietary AI models. Gain insights into the successful exploitation technique achieving full privilege escalation into TDX firmware, understand Intel's implemented fixes, and receive guidance for conducting further security research on TDX technology.
Syllabus
Compromising Confidential Compute, One Bug at a Time
Taught by
Black Hat