#BadRAM
I once had a machine I wrote a custom Linux kernel patch for to avoid a bad memory segment.

I believe there are now BadRAM patches? YMMV

Fwiw, Linus and Greg are die hard ECC on desktop users.
October 3, 2026 at 12:28 AM
Notícia da SecurityOnline

"Vulnerabilidade BadRAM (CVE-2024-21944): Pesquisadores Descobrem Falha de Segurança no AMD SEV" #bolhasec
BadRAM Vulnerability (CVE-2024-21944): Researchers Uncover Security Flaw in AMD SEV
A collaborative research effort has exposed a significant vulnerability, designated CVE-2024-21944 and named “BadRAM,” that undermines the integrity of AMD’s Secure Encrypted Virtualization (SEV) technology. This security flaw permits malicious... The post BadRAM Vulnerability (CVE-2024-21944): Researchers Uncover Security Flaw in AMD SEV appeared first on Cybersecurity News.
securityonline.info
December 12, 2024 at 12:46 PM
Notícia da SecurityWeek

"Ataque BadRAM Usa Equipamento de $10 para Quebrar Proteções do Processador AMD" #bolhasec
BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections
Academic researchers devise BadRAM, a new attack that uses $10 equipment to break AMD’s latest trusted execution environment protections. The post BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections appeared first on SecurityWeek.
www.securityweek.com
December 11, 2024 at 6:45 PM
AMD’s trusted execution environment blown wide open by new BadRAM attack #BadRAM #AMD arstechnica.com/information-...
AMD’s trusted execution environment blown wide open by new BadRAM attack
Attack bypasses AMD protection promising security, even when a server is compromised.
arstechnica.com
December 10, 2024 at 6:41 PM
Amd Secure Virtual Machine Tech Hacked by Rogue Admin via BadRAM Attack
www.ethicalhackingnews.com
December 10, 2024 at 5:10 PM
AMDチップのSecure Encrypted Virtualisation (SEV)をバイパスする脆弱性BadRAMが見つかった。悪用には物理的にアクセスする必要がある。同社はファームウェアのアップデートを出している。 https://therecord.media/amd-security-flaw-badram
BadRAM: $10 security flaw in AMD could allow hackers to access cloud computing secrets
Researchers found a way to disrupt AMD server hardware using $10 worth of off-the-shelf items. The company has issued a firmware update. There's no evidence of exploitation in the wild.
therecord.media
December 10, 2024 at 4:29 PM
'BadRAM' exploit: Security flaw in computer memory leads to worldwide fixes. buff.ly/4fe1ujC
buff.ly
December 11, 2024 at 9:21 PM
Ouch, confidential computing is not so confidential
arstechnica.com/information-...
AMD’s trusted execution environment blown wide open by new BadRAM attack
Attack bypasses AMD protection promising security, even when a server is compromised.
arstechnica.com
December 10, 2024 at 5:48 PM
Researchers found a way to disrupt AMD server hardware using $10 worth of off-the-shelf items. The company has issued a firmware update. There's no evidence of exploitation in the wild. https://therecord.media/amd-security-flaw-badram
BadRAM: $10 security flaw in AMD could allow hackers to access cloud computing secrets
Researchers found a way to disrupt AMD server hardware using $10 worth of off-the-shelf items. The company has issued a firmware update. There's no evidence of exploitation in the wild.
therecord.media
December 10, 2024 at 4:12 PM
Researchers have found that the security mechanism AMD uses to protect virtual machine memory can be bypassed with $10 of hardware – and perhaps not even that. www.theregister.com/2024/12/10/a...
AMD secure VM tech undone by DRAM meddling
Boffins devise BadRAM attack to pilfer secrets from SEV-SNP encrypted memory
www.theregister.com
December 11, 2024 at 2:14 PM
One of the principal concepts of information security is physical security. Almost any designed security measure for hardware or software can be breached with physical access and time.

The lesson here is to keep your computers physically safe and accounted for.

arstechnica.com/information-...
AMD’s trusted execution environment blown wide open by new BadRAM attack
Attack bypasses AMD protection promising security, even when a server is compromised.
arstechnica.com
December 11, 2024 at 9:24 AM
-TikTok downplays role in Romania's annulled election
-Meta was also MIA during Romanian elections
-Patch Tuesday is out
-MSFT fixes a zero-day spotted by CrowdStrike
-WhatsApp patches view-once bypasses
-New RoR JSON Juggling Attack
-New BadRAM attack
December 11, 2024 at 9:44 AM
BadRAM - new CPU attack on AMD SEV modules

badram.eu
December 10, 2024 at 5:01 PM
bittersweet to see this research published because I had exactly the same idea but never quite pulled it off lol badram.eu
BadRAM
badram.eu
December 11, 2024 at 4:48 PM
BadRAM attack breaches AMD secure VMs using a Raspberry Pi Pico, DDR socket, and a 9V battery www.tomshardware.com/software/sec...
BadRAM attack breaches AMD secure VMs using a Raspberry Pi Pico, DDR socket, and a 9V battery
AMD has now issued firmware updates for cloud providers.
www.tomshardware.com
December 13, 2024 at 1:57 PM
Every time I read about an exploit like BadRAM made public I am reminded that there is an unknown amount of exploits not made public and without mitigation yet. Also, being exploited to some degree as bad actors keep the "good stuff" for themselves... Or sell it in the dark market.

badram.eu
BadRAM
badram.eu
December 11, 2024 at 10:25 PM
研究人员披露针对 AMD SEV 的 BadRAM 攻击

如果能物理接触硬件,那么硬件的安全性通常就无法保障了。然而在云计算时代,客户的敏感数据都储存在未知地点的云端,由未知身份的服务器管理员维护。如何防止能物理接触设备的人窃取敏感数据?芯片供应商的回应是加入保护措施,确保在服务器被物理篡改或感染恶意软件的情况下敏感数据不会被窃取。本周二,一个国际研究小组公布了针对 AMD SEV 的 BadRAM 攻击。AMD 的 Secure Encrypted Virtualization (SEV)被用于加密虚拟机内存并将其隔离以保障云计算的隐私和信任。研究人员报告,利用不到 10 美元的设备,他们
December 11, 2024 at 4:00 PM
Researchers reveal the BadRAM attack on AMD SEV, exploiting vulnerabilities in Secure Encrypted Virtualization. With under $10 equipment, they bypass SEV protections, prompting AMD to release a patch that increases boot time but maintains performance. #CyberSecurity #AMD #SEV
Read more>>
December 11, 2024 at 4:02 PM
....and I got to talk to senior DG Clima official, Elina Badram, about selling the message of climate action when EU attentions are focused on competitiveness and security
www.irishtimes.com/environment/...
Green motives are great, but climate agenda must also appeal to broader constituency
‘Utility-based mentality’ can get previously reluctant industries on board, says Elina Bardram
www.irishtimes.com
July 2, 2026 at 6:01 PM
BadRAM sounds interesting but if you have physical access, all bets are off. Those people are called "insider threats" and realistically they'll win, if they choose to play the game.
December 10, 2024 at 4:23 PM
BadRAM exposes a major vulnerability-just $10 and brief physical access lets attackers break AMD SEV protections and threaten Intel SGX/TDX. Firmware updates help, but trusted hardware is no longer unbreakable.

#cloudsecurity #blockchain #BadRAM
October 2, 2025 at 7:27 AM