Intel unveils two Threat Detection Technology features: letting software scan system memory for malware using integrated GPUs and advanced telemetry tools
The company is also using its processors' performance monitoring to detect malicious code. — Since the news of the Metldown …
Context & Ripple Effects
This lands a month after Intel said its upcoming 8th-gen Xeon and Core chips were redesigned for hardware protection against Spectre variant 2 and Meltdown — the disclosure that opened this arc. Threat Detection Technology is the software-facing complement: instead of only hardening the silicon, Intel starts renting its idle integrated GPU to antivirus vendors for memory scanning and exposes processor performance-monitoring counters as a malware telemetry feed.
The later coverage shows both why that matters and where it strains: researchers showed malware can abuse SGX enclaves to hide from antivirus entirely, and by 2020 Intel was still extending the hardware-security line with Control-flow Enforcement Technology debuting in Tiger Lake, while Microsoft and Intel explored deep-learning detection on grayscale-converted binaries.
First-order effects
- Endpoint security vendors get two new Intel-provided hooks — GPU-offloaded memory scanning and performance-counter telemetry — letting them detect malicious code without taxing the CPU cycles their own agents consume.
- Intel gains a security differentiator for systems with its integrated graphics, at a moment when Meltdown fallout had put its silicon under scrutiny.
Second-order effects
- Rival chipmakers face pressure to expose equivalent silicon-level telemetry, since AV products built around Intel's hooks create an integration advantage that software alone cannot match.
- Security tooling drifts toward deeper hardware coupling, raising the bar for attackers who previously assumed antivirus only sees what the OS surfaces.
Third-order effects
- If the pattern holds, malware defense consolidates into the platform itself — the same trajectory the later SGX abuse findings cut against, since every new trusted hardware feature becomes an attack surface of its own.
- Chip-and-software co-design becomes the industry structure for endpoint security, with detection features shipping as CPU capabilities rather than third-party add-ons.
The trend: Processor makers are turning CPUs and their integrated components into first-line malware sensors, making security features a standing part of silicon roadmaps rather than an OS-layer afterthought.