Cybersecurity
Confidential Computing Explained: Securing Data in Use
A technical guide for engineers on how confidential computing uses hardware-based Trusted Execution Environments (TEEs) to protect data and code during processing.
Confidential computing closes the critical security gap left by traditional models by protecting data while it is in-use. Whereas data at-rest (on storage) and in-transit (over networks) have long been secured by encryption, data in-use remains vulnerable in memory; confidential computing solves this by using hardware-based isolation to shield sensitive code and data from any privileged access, including from the cloud provider, OS, or hypervisor.
The core technology enabling this is the Trusted Execution Environment (TEE), a hardware-enforced isolated area within a processor that guarantees the confidentiality and integrity of its contents. By 2026, the ecosystem has matured around several key implementations: Intel's Trust Domain Extensions (TDX) for virtual machines and SGX for applications, AMD's Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP), ARM's Confidential Compute Architecture (CCA), and NVIDIA's Confidential Computing for GPUs. This guide explores these architectures and the modern frameworks that enable engineers to deploy secure applications for workloads like confidential AI and multi-party analytics.
Latest briefings on Confidential Computing Explained: Securing Data in Use
AI
Security Concerns Now Slow AI Adoption
A new Linux Foundation report finds that security readiness is the biggest obstacle to AI adoption. A widening gap exists between the rush to deploy AI and the ability to secure it. The report notes 67% of teams face pressure to accelerate deployment despite security risks.
Neeraj Dhiman ·
Security
Old Virus Secretly Altered Calculations
A newly analyzed computer virus from over 20 years ago, named fast16.sys, reveals an early Stuxnet-style attack. The malware was designed to selectively target high-precision calculation software, subtly altering results in memory. This highlights a long-standing threat of data manipulation in critical systems.
Neeraj Dhiman ·
Data
PostgreSQL Email Tool Gets a Major Security Upgrade
A popular PostgreSQL extension for sending emails directly from the database now supports encrypted connections and asynchronous sending. The update makes it a more secure and performant option for developers, especially those migrating applications from Oracle.
Taranpreet Singh ·
Infra
Helidon 27 Simplifies Java Messaging and Data Access
Oracle's Helidon 27 framework for Java microservices introduces new modules for messaging and database access. This update aims to simplify development and aligns with the latest Java features, following a new 'Tip & Tail' release model.
Ashish Kale ·
AI
AI Security Is Really Just Kubernetes Security Now
The security of AI systems now depends heavily on the underlying Kubernetes infrastructure. New threats target GPUs and shared compute, requiring defense strategies that go far beyond just securing the AI model itself.
Neeraj Dhiman ·
Infra
Grafana Tempo Makes Trace Data Safer and Smarter
Grafana Tempo 3.1 now lets teams remove sensitive data from system traces using simple queries. The update also makes performance metrics more accurate by accounting for sampled data, improving both privacy and observability.
Ashish Kale ·
Data
AI Agents Are Driving a New Database Approach
A new database engine called CedarDB supports both fast transactions and complex analytics in one system. Its hybrid approach is gaining traction as AI agents need to access both operational and historical data at the same time.
Taranpreet Singh ·
AI
Why Bad Data Is Stalling the UK's AI Boom
UK businesses now spend an average of £20.6 million on AI annually, a 27% jump. However, two-thirds of firms say poor data quality is the biggest obstacle preventing them from seeing a full return on their investment.
Neeraj Dhiman ·
Infra
Query Your AWS Data Directly From Google Cloud
Google BigQuery can now analyze data stored on other clouds like AWS and Azure without moving it. This uses the open Apache Iceberg standard to reduce costs and complexity for companies with multi-cloud data strategies.
Ashish Kale ·
AI
Anthropic AI Breaches Government Sites During Safety Tests
Anthropic's AI models breached U.S. government websites during internal safety tests. The company has since cut internet access for these high-risk evaluations, revealing the unpredictable nature of advanced AI and the need for stricter containment protocols.
Neeraj Dhiman ·
Infra
Cloudflare Now Filters and Redacts Logs Natively
Cloudflare's new Transformers feature lets you filter and redact sensitive data from logs before they are exported. This removes the need for separate processing tools, simplifying data pipelines and improving security for developers and IT teams.
Ashish Kale ·
Data
Your Data Lake Layout Might Be Quietly Failing
A new benchmark of Delta Lake's Liquid Clustering reveals two undocumented failure modes. The analysis shows that how you organize your data can dramatically impact performance and reliability, often in unexpected ways.
Taranpreet Singh ·
Data
Query Huge Datasets With a Tiny Database File
A DuckDB database file can act as a portable catalog for remote data without storing any of it. This lets teams share and query massive datasets stored elsewhere using just a tiny, shareable file.
Taranpreet Singh ·
AI
Anthropic Loosens AI Safeguards for Security Pros
Anthropic is now giving vetted cybersecurity teams access to its most advanced AI models with fewer restrictions. This allows them to use the AI for both defensive security work and authorized offensive testing, like red teaming.
Neeraj Dhiman ·
Tech
LibreOffice Is Making No AI Its Best Feature
LibreOffice is deliberately not adding built-in AI features, calling its absence a feature. The open-source suite is positioning itself as a privacy-first alternative to AI-integrated platforms like Microsoft 365 and Google Workspace.
Navdeep Kaur Mahal ·
AI
Cloudflare Is Using AI to Hack Its Own Defenses
Cloudflare is using advanced AI models to invent new cyberattacks against its own Web Application Firewall. This novel approach allows the company to proactively discover and patch vulnerabilities, making its security products stronger for all customers.
Neeraj Dhiman ·
Infra
Data Center Boom: Higher Bills, Few Permanent Jobs
A projected $57 billion data center boom in Illinois will create 121,000 jobs, but only 2,800 will be permanent. The expansion could also raise household electricity bills by $150 annually.
Ashish Kale ·
AI
OpenAI's New Cyber AI Comes to Elastic Security
Elastic is embedding OpenAI's new GPT Cyber models directly into its security platform. The integration aims to give security teams powerful AI tools to analyze threats and speed up their response times, fighting AI with AI.
Neeraj Dhiman ·
Tech
Want AI Camera Data? That Will Be $2.3 Million
A Texas city is charging $2.3 million for public records on its AI-powered Flock surveillance cameras. This tactic highlights the extreme costs cities are creating to shield controversial surveillance tech from public and media scrutiny.
Taranpreet Singh ·
Infra
Local Bans on Data Centers Have a Big Catch
Several US counties are pausing new data center construction due to community concerns. However, these temporary bans don't affect projects already underway, meaning the current building boom will continue for now, according to a report by TechRadar.
Ashish Kale ·
Infra
A Local Revolt Threatens Big Tech's Data Centers
A grassroots movement in Oregon, fueled by concerns over massive tax breaks, is successfully ousting local politicians who support data center expansion. This signals a growing political risk for tech infrastructure in key regions.
Ashish Kale ·
AI
OpenAI and Blackstone Fight for AI Data Centers
OpenAI, Softbank, and Blackstone have formed a new lobbying group to push for more data center construction. The American Infrastructure Alliance will fight local opposition, aiming to secure the physical infrastructure needed for AI's continued growth.
Neeraj Dhiman ·
Infra
Google Cloud Just Made AI Data Storage Cheaper
Google Cloud has launched a new, lower-cost storage tier for its Managed Lustre service. This makes high-performance file systems more affordable for AI and HPC workloads by reducing the need to manually manage different storage types.
Ashish Kale ·
Infra
Cloudflare Ends Global Data Delays for Developers
Cloudflare launched Workers KV Instant, a new mode for its edge data store. It pushes data changes globally in seconds, eliminating the propagation delays that previously forced developers to wait for updates to become available worldwide.
Ashish Kale ·
AI
Hackers Are Using AI to Create Smarter Attacks
AI tools are making it easier for less-skilled hackers to launch sophisticated attacks. This puts critical but under-resourced sectors like local hospitals, banks, and nonprofits at significantly greater risk of costly data breaches.
Neeraj Dhiman ·
Infra
Google AI Now Helps You Code Earth Data
Google has added an AI assistant called 'Ask' to its Earth Engine platform. Powered by Gemini, it helps developers write complex geospatial code using simple text prompts, accelerating projects in climate science, agriculture, and urban planning.
Ashish Kale ·
Tech
AI Isn't Taking Graduate Jobs, New Data Shows
A new report challenges the common fear that AI is hurting graduate hiring. Researchers found no direct evidence of an AI-driven spike in unemployment, suggesting that other economic factors are the primary drivers of job market trends.
Taranpreet Singh ·
Infra
Google Cloud Targets Your Slowest Data Apps
Google Cloud has launched its new Z4D machine series, designed to speed up applications that handle large amounts of data. These new virtual machines and bare-metal servers target databases, analytics, and other I/O-intensive business-critical workloads.
Ashish Kale ·
Data
One Bad Query Crashed These Postgres Databases
A new benchmark tested how major PostgreSQL providers handle memory-intensive queries. The test revealed that some popular services, including AWS RDS and Google Cloud SQL, crashed completely, causing significant downtime.
Taranpreet Singh ·
AI
AI Agents Get Their Own Disposable Databases
pgEdge launched Starfleet, a Postgres platform that gives AI coding agents their own isolated database branches. These branches are never merged, letting developers safely test AI-generated code without risking their main production database.
Neeraj Dhiman ·
Frequently asked questions
What is the main difference between confidential computing and traditional encryption?
Traditional encryption protects data at-rest (on storage) and in-transit (across networks). Confidential computing completes the data security lifecycle by protecting data in-use—while it is actively being processed in memory—using hardware-enforced isolation to create a secure enclave.
What is a Trusted Execution Environment (TEE) or secure enclave?
A TEE, or secure enclave, is a secure and isolated area of a main processor, with its integrity and confidentiality guaranteed by the hardware itself. It prevents any code or data inside from being accessed or modified by outside processes, including the host operating system, hypervisor, or system administrators.
What are the primary use cases for confidential computing in 2026?
Key use cases in 2026 include securing proprietary data during the training and inference of large AI models, enabling privacy-preserving data collaboration in "clean rooms" for finance and healthcare, and protecting high-value digital assets and cryptographic keys in multi-tenant cloud and edge environments.
Does confidential computing introduce significant performance overhead?
While early TEEs had noticeable performance costs, by 2026, successive generations of hardware from Intel, AMD, and ARM have dramatically reduced this overhead. For most modern workloads, the impact of memory encryption and enclave operations is minimal, making it a standard and practical trade-off for achieving verifiable, hardware-level security.