Researchers disclose new remote attack method for extracting data from Intel CPUs using a power monitor interface, with Linux most at risk; Intel issues patches
this time thanks to on-chip power meter Thomas Claburn / The Register : One more reason for Apple to dump Intel processors: Another SGX, kernel data-leak flaw unearthed by experts SecLists.Org Security Mailing List Archive : Xen Security Advisory 351 v1 - Information leak via power sidechannel Michael Larabel / Phoronix : Intel Discloses 40 More Security Advisories - PLATYPUS Is An Interesting One Sabina Weston / IT PRO : Intel CPUs vulnerable to ‘Platypus’ side-channel attacks Tweets: Catalin Cimpanu / @campuscodi : New Platypus attack can steal data from Intel CPUs -attack targets the Intel RAPL interface -attack infers data by looking at power consumption values in the CPU -tested to break KASLR, steal data like encryption keys from the Linux kernel, and break SGX https://www.zdnet.com/... https://twitter.com/... Lightco.In / @lightcoin : Trust SGX they said. It'll protect your privacy they said. https://twitter.com/... Grubles / @notgrubles : Always interesting to see a solution big blockers claimed would solve #Bitcoin scaling (Teechan + SGX) utterly hacked over and over again. https://twitter.com/... Dan Goodin / @dangoodin001 : PLATYPUS attack can leak crypto keys from the OS or SGX, break ASLR and establish a covert channel, AND it does so remotely. This power side channel uses RAPL, a power meter that's built into all Intel CPUs since the Sandybridge architecture. Very cool research. https://twitter.com/...
Context & Ripple Effects
Platypus is the latest entry in a disclosure chain that has run since researchers first showed speculative execution flaws could steal data from running apps across most Intel chips — the Meltdown and Spectre moment that started the modern side-channel era. Since then each wave has found a new microarchitectural surface: ZombieLoad hit nearly all post-2011 chips, LVI attacks let code be injected inside the CPU even from JavaScript, and SgxPectre already showed Intel's SGX secure enclaves could be read.
First-order effects
- Linux kernel users on Intel CPUs are the most exposed population right now, since the attack reads data through the RAPL power-monitoring interface, and Intel's patches are the immediate mitigation for affected systems.
- SGX enclave operators face direct key-extraction risk: Platypus extends the SgxPectre line of work showing secure-enclave isolation fails under side-channel pressure.
Second-order effects
- Cloud and OS vendors will have to restrict or gate access to power-metering interfaces the way they hardened speculative-execution surfaces after Meltdown and Spectre, trading telemetry granularity for security.
- The Register's framing of this as 'one more reason for Apple to dump Intel processors' points to cumulative reputational cost: each new Intel-only flaw strengthens the case for rivals whose architectures have so far been less central to these disclosures, though AMD is not immune to the broader class as Daniel Gruss demonstrated on AMD hardware back in 2018.
Third-order effects
- If every new CPU subsystem — execution pipelines, buffers, and now power meters — keeps yielding exploitable side channels, microarchitectural leakage becomes a permanent tax on high-performance silicon, pushing isolation guarantees toward software boundaries and fueling second-source compute strategies among large buyers.
The trend: Intel chip security is settling into a cycle of recurring microarchitectural side-channel disclosures, where each newly exposed on-chip interface forces another round of patches and nudges major buyers toward architectural alternatives.