Research roundup documents years of attacks breaking TEE security guarantees

GoKawiil's interpretation of the reporting above, not reported fact.

The compilation suggests that TEE vendors have struggled to make durable security guarantees despite marketing them as hardware-rooted trust anchors, since side-channels and attestation forgeries keep resurfacing across multiple vendors and years. This could prompt developers and companies relying on TEEs for confidential computing, secure messaging, or cloud isolation to reassess their threat models or reduce dependence on hardware attestation as a sole safeguard. The author argues the complexity of modern CPUs makes such security claims inherently difficult to verify or trust fully.

• Multiple real-world attacks (Foreshadow, SGAxe, ÆPIC Leak, BadRAM, WireTap.fail) have broken attestation security in Intel SGX and AMD SEV over the past several years.
• Some attacks stem from bugs in enclave application code itself, such as a memory-safety flaw in Signal's contact discovery enclave.
• Other attacks require physical hardware access, such as reprogramming DIMM chips, raising questions about the real-world threat model for TEE deployments.