Release of a Technical Report into Intel Trust Domain Extensions

Google and Intel jointly reviewed Intel Trust Domain Extensions (TDX) 1.5, and this post details the findings of that security review for confidential computing.

Quarkslab walks through the IGVM file format, which bundles a VM's BIOS/OVMF, kernel and initrd for secure launch across isolation stacks like AMD SEV-SNP and Intel TDX.

A starter collection of virtualization security resources: hardening guides for Hyper-V, VMware vSphere, and Xen, plus references from DISA STIG, CSA, SANS, and CIS.

After a dull conference, the author concludes cloud pentesting is fundamentally the same as traditional testing: virtualized or shared, the underlying technology and security controls hardly change.

A Project Zero report on a Xen hypervisor escape: an attacker controlling a paravirtualized x86-64 guest kernel could break out and control physical memory, patched in April 2017.

A detailed overview of L1TF, a CPU vulnerability affecting some Intel CPUs (Skylake and older), including how it can be exploited and possible mitigation strategies.