Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A few notes on AWS Nitro Enclaves: KMS integration

blog.trailofbits.com | blog | #cloud | #cloud-security | #aws | #secrets | #confidential-computing | #cryptography | #trail-of-bits | #nitro-enclaves | #kms

Summary

The third post in Trail of Bits' Nitro Enclaves series catalogs passive and active attacks against the enclave-KMS channel, plus operational risks that persist even when cryptography is correct.
Published
Collected

original ↗

Related coverage

blog · blog.trailofbits.com
Auditing in the age of (good enough) AI
Trail of Bits explains how agents built tooling and a Lean model for the Miden zkVM audit, finding a flaw enabling Falcon signature forgery and yielding 95 machine-checked proofs.
blog · blog.trailofbits.com
A few notes on AWS Nitro Enclaves: Attack surface
Trail of Bits maps the attack surface of AWS Nitro Enclaves, covering vsock pitfalls, randomness, side channels, memory, time sources, and attestation, with guidance for hardening deployments.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
blog · wiz.io
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
Wiz Research analyzes NordStellar logs to map credentials harvested by infostealers like Lumma and RedLine, showing how stolen keys and tokens unlock AWS, Azure, GitHub, and AI platforms.
blog · wiz.io
Wiz Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
Wiz earned Leader status in Forrester's Q3 2026 Proactive Security Platforms Wave, scoring 5.0/5.0 on 8 of 21 criteria, including cloud visibility, exposure validation, and remediation augmentation.
blog · projectzero.google
Release of a Technical Report into Intel Trust Domain Extensions
Announcing a technical report on Intel Trust Domain Extensions, analyzing the confidential computing architecture's security model, implementation, and potential weaknesses.
back