Report on an attested TLS relay flaw hitting WhatsApp and Cocos AI, proof that handshakes still cosplay as security.
trending16
01 02 Attested TLS Was Supposed to Be the Last Trust Boundary. It Isn't. Formal Methods Show How. hackernoon.comProVerif finds CVE-2026-33697, a relay attack that breaks attested TLS binding, so the last trust boundary wasn't.03 The Handshake That Can't Keep Its Promise: Why Confidential Computing's Flaw Changes the Data Sovereignty Conversation blogs.groupware.org.ukAttested TLS can be relayed, so confidential computing’s data sovereignty pitch takes a CVE-sized hit.04 Can remote attestation actually prove you’re talking to the TEE, or just to a relay that forwards the traffic?05 The nasty bit is the hardware root of trust, apparently, is the thing that broke, and TEEs may not have a real fix.06 Google's 'verifiable trust' update ships Blackwell confidential VMs, prompt encryption SDKs, live migration, and TDX.07 Can enterprise AI agents be trusted without attested execution, or is this just logging with a conference badge?08 SEV Subnets Explained: Hardware Encryption and Confidential Computing on the Internet Computer youtu.beA YouTube explainer on SEV subnets, where the Internet Computer turns AMD hardware encryption into confidential computing.09 End-to-end confidential AI for CPU+GPU TEEs, with attestation and benchmarks, not the usual single-box secure inference demo.10 Confidential-computing attestation only proves enclave integrity; this piece says StageX-style reproducible bootstraps are the missing pr...11 Dashlane explains how it bolted an AI advisor onto credential telemetry without surrendering its zero-knowledge pitch.12 VivaTech 2026: AI Agents, Post-Quantum Cyber Resilience & The New Frontier Of Enterprise Security + Video undercodetesting.comPost-quantum migration is the easy part; the real mess is keeping AI agents from leaking data and swallowing deepfakes.13 End-to-end sovereign AI in TEEs, with OpenShift confidential containers, PETs, FHE, PQC key exchange, and auditing glued on.14 OTRO swaps the usual tokenizer side-channel mess for square-root ORAM plus replicas, aiming to keep TTFT tolerable.15 Apple takes PCC off its own silicon, moving confidential inference to Google Cloud with TDX, Titan, and attestation theater.16 Zama Acquires TokenOps: Confidential & Fully Compliant Token Distributions, Airdrops, and Vesting zama.orgZama buys TokenOps, pushing FHE into vesting and airdrops with ERC-7984, so privacy now comes with an audit trail.