Intel says its upcoming Tiger Lake mobile CPUs will be the first to use its anti-malware Control-flow Enforcement Technology
Intel says CET can protect against ROP/JOP/COP malware. — Intel has announced today that its experimental CET security feature will be first made available …
Context & Ripple Effects
CET is the third act in Intel's post-Spectre security push. After the 2018 hardware redesign of Xeon and Core chips against Spectre variant 2 and Meltdown, Intel followed with Threat Detection Technology, which offloads malware scanning to the integrated GPU — a pattern of pushing defense from software into silicon. CET completes that arc by enforcing control flow in the CPU itself, targeting ROP/JOP/COP attack techniques rather than scanning for known malware.
The announcement also rounds out Tiger Lake's pitch. The January preview positioned these mobile CPUs around Xe graphics and Thunderbolt 4 throughput; adding first-to-market CET gives OEMs a security differentiator on top of performance claims.
First-order effects
- Buyers of upcoming Tiger Lake laptops get hardware-enforced protection against ROP/JOP/COP malware that older Intel mobile chips lack, making CET a concrete reason to buy this generation rather than last year's.
- OS vendors and security software makers must add CET support to unlock the feature — the silicon is inert until the software stack opts in.
Second-order effects
- AMD faces pressure to answer with equivalent hardware control-flow enforcement in its mobile Ryzen line, or concede the security talking point in enterprise laptop bids.
- Endpoint security vendors gain a second Intel hook beyond Threat Detection Technology — the path Microsoft already took when Defender for Endpoint began blocking cryptojacking using Intel's silicon-based detection.
Third-order effects
- If CET adoption holds, malware defense structurally splits between legacy CPUs running software-only defenses and new silicon with built-in control-flow enforcement, turning security capability into a CPU generation tiering factor rather than an OS patch level.
The trend: PC security is migrating from software layers into the CPU itself, with Intel using silicon-enforced defenses like CET as a generational differentiator.