Cybersecurity
Confidential Computing Explained: Securing Data in Use
A technical guide for engineers on how confidential computing uses hardware-based Trusted Execution Environments (TEEs) to protect data and code during processing.
Traditional data security models excel at protecting data at-rest (on disk) and in-transit (over the network) through encryption, but they leave a critical gap: data in-use. While being processed in memory, data is typically decrypted and vulnerable to compromised privileged software like the OS, hypervisor, or other system processes. Confidential computing addresses this by isolating sensitive code and data in a protected, hardware-based environment, ensuring it remains encrypted and inaccessible even during active computation.
The core technology enabling this is the Trusted Execution Environment (TEE), often called a secure enclave. TEEs are isolated areas within a CPU, enforced by the silicon itself, that guarantee the confidentiality and integrity of the code and data within them. This guide explores the architecture of TEEs, prominent implementations like Intel SGX and AMD SEV, and the practical steps engineers must take to build and deploy applications that leverage these environments to protect the most sensitive workloads, from AI model inference to multi-party data analytics.
Latest briefings on Confidential Computing Explained: Securing Data in Use
AI
Security Concerns Now Slow AI Adoption
A new Linux Foundation report finds that security readiness is the biggest obstacle to AI adoption. A widening gap exists between the rush to deploy AI and the ability to secure it. The report notes 67% of teams face pressure to accelerate deployment despite security risks.
Neeraj Dhiman ·
Security
Old Virus Secretly Altered Calculations
A newly analyzed computer virus from over 20 years ago, named fast16.sys, reveals an early Stuxnet-style attack. The malware was designed to selectively target high-precision calculation software, subtly altering results in memory. This highlights a long-standing threat of data manipulation in critical systems.
Neeraj Dhiman ·
AI
How an Engineer Used AI to Find Security Flaws
A software engineer used GitHub Copilot, Claude, and Gemini to find security vulnerabilities in the ClickHouse codebase. This practical case study shows how AI can help developers without deep security expertise improve software security.
Neeraj Dhiman ·
Security
New AMD Zen 5 Chips Can Leak Sensitive Data
Researchers found critical flaws in AMD processors, including the new Zen 5 architecture. The vulnerabilities could allow a local attacker to steal sensitive data, potentially compromising cryptographic operations and leaking privileged information.
Neeraj Dhiman ·
Infra
Cloudflare Tool Migrates Security Setups in Hours
Cloudflare has released a new open-source tool to help companies move to its Zero Trust security platform. It includes automated logic to migrate from competitors like Zscaler and Palo Alto Networks, cutting migration times from months to hours.
Ashish Kale ·
Data
Keep Your Old PostgreSQL Database Secure for Longer
A new service from PGX offers security patches and bug fixes for old, unsupported versions of PostgreSQL. This helps companies that can't upgrade stay secure and maintain data integrity without a costly migration.
Taranpreet Singh ·
Data
Visa Cut Data Reporting From Days to Seconds
Visa built a conversational AI agent using ClickHouse and LibreChat to analyze payments data. The new system turns multi-day reporting tasks into sub-second queries, saving each user up to 10 hours of work every week.
Taranpreet Singh ·
AI
Microsoft AI Finds Missed Diagnoses in Genomic Data
Microsoft Research released Talos, an open-source AI that re-analyzes old genomic data. As scientific knowledge grows, the tool finds previously missed rare disease diagnoses, successfully identifying 90% of cases in a large validation study.
Neeraj Dhiman ·
Tech
Ukraine Open-Sources Captured Russian Military Technology
Ukraine's Ministry of Defence has launched TrophyLab, a new platform open-sourcing intelligence on captured Russian military hardware. Verified allies can access technical data, schematics, and even request physical samples to develop countermeasures.
Taranpreet Singh ·
AI
Rust Hires an AI Expert to Fight Security Spam
The Rust Foundation has hired an AI Security Engineer in Residence. The new role will help manage the growing number of vulnerability reports generated by AI tools, allowing maintainers to focus on legitimate security threats.
Neeraj Dhiman ·
AI
This AI Finds Security Flaws Others Refuse To
A new AI model is designed specifically for security testing, unlike major models that refuse such tasks. It helps smaller companies find and fix vulnerabilities that might otherwise be missed, leveling the playing field against attackers.
Neeraj Dhiman ·
AI
GitLab Unlocks AI Adoption With New Security Tools
GitLab's latest update introduces event-driven triggers for its AI workflows. This helps companies automate tasks safely by giving security and IT teams better control and visibility over what AI tools are running in their environment.
Neeraj Dhiman ·
AI
DeepMind Borrows Cybersecurity Playbook for AI Control
Google DeepMind released a new AI control roadmap that treats AI risks like cybersecurity threats. The framework uses familiar concepts like threat modeling to help developers build guardrails for increasingly powerful AI agents.
Neeraj Dhiman ·
Tech
AI Is Creating a Data Center Power Crisis
A new Gartner report predicts data center power consumption will jump over 26% between 2025 and 2026, driven by AI. This surge makes power availability a critical bottleneck, impacting costs and scalability for all tech companies.
Navdeep Kaur Mahal ·
Infra
Query Rich Metadata Directly on Your S3 Objects
AWS S3 now lets you attach up to 1 GB of rich, queryable metadata to each object. This simplifies managing complex data for AI pipelines and data lakes by keeping context directly with the data itself.
Ashish Kale ·
Infra
AWS Now Lets You Bill AI Bots for Content
AWS WAF has a new feature that lets website owners charge AI bots for accessing their content. This allows publishers to create new revenue streams from AI traffic directly at the network edge, without any code changes.
Ashish Kale ·
Security
Microsoft Named Leader in Endpoint Protection
For the seventh consecutive time, Microsoft has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Endpoint Protection. The placement highlights the company's strength in the endpoint security market, particularly with its Microsoft Defender product, amid increasingly coordinated and fast-moving cyber threats.
Neeraj Dhiman ·
Infra
Donated Park Land Sold for a $10M Data Center
A city sold land donated for a public park to data center developers for $10 million. The move shows the huge demand for real estate to support the growing tech industry and the financial pressures on local governments.
Ashish Kale ·
Security
Open-source private security camera updated
Secluso, an open-source home security camera system, has been updated. Formerly Privastead, it offers end-to-end encryption using OpenMLS and focuses on user privacy. The system is designed for easy deployment on hardware like the Raspberry Pi, providing a private alternative to commercial IoT solutions.
Neeraj Dhiman ·
Security
Schneier Hosts Open Security Discussion
The 'Schneier on Security' blog has published its recurring 'Friday Squid Blogging' post. While ostensibly about marine life, the post serves as a well-known open thread for the security community to discuss recent news and topics that were not covered on the blog during the week.
Neeraj Dhiman ·
Security
Bad Design Is Your Biggest Security Risk
A top university CIO argues that security fails when it's hard to use. He says controls should be invisible to users, and the same principle must apply to new AI agents to keep them secure.
Neeraj Dhiman ·
Security
Over Half of CISOs Would Pay Ransom
A new survey commissioned by Absolute Software reveals a significant trend in ransomware response. It found that 58% of Chief Information Security Officers (CISOs) say their organization would pay a ransom to recover data, highlighting a major shift in incident response strategy.
Neeraj Dhiman ·
Security
Multiple Security Flaws Found In MediaWiki
Multiple vulnerabilities have been discovered in MediaWiki, the popular open-source wiki software. The flaws could allow attackers to determine if users have two-factor authentication enabled and to view the titles of intentionally hidden log entries, posing a risk to user privacy and site security.
Neeraj Dhiman ·
Data
Elastic Releases Important Security Update
Elastic has released version 8.19.16 of the Elastic Stack, a security patch that addresses potential vulnerabilities. The company recommends all users upgrade to this latest version to ensure their deployments are protected. This update supersedes previous versions and is crucial for maintaining system security.
Taranpreet Singh ·
Data
PostgreSQL Anonymizer Now Offers Stronger Data Privacy
The new version of PostgreSQL Anonymizer introduces Local Differential Privacy, a sophisticated technique for data masking. This gives developers a more robust way to protect sensitive user information without compromising data utility.
Taranpreet Singh ·
Security
Cyber Insurance Now Drives Security
Cyber insurance is no longer just a safety net; it's actively shaping corporate security strategies. Insurers are now requiring organizations to quantify their cyber risk, leading to more rigorous security practices and a clearer understanding of what policies actually cover and what they leave exposed.
Neeraj Dhiman ·
Data
Autonomous Databases Won't Replace Your Team
Autonomous databases promise to manage themselves, but they won't eliminate the need for human experts. Percona's co-founder explains that while automation is transforming data management, human oversight and strategic input remain essential for success.
Taranpreet Singh ·
Infra
Lombardy Adds 200% Data Center Tax
The Lombardy region in Italy has introduced a new policy that can increase construction charges for data centers by up to 200%. The higher fees apply specifically to facilities built on green or agricultural land, reflecting a growing pushback against the environmental impact of tech infrastructure.
Ashish Kale ·
Security
Why Annual Security Tests Fail
Traditional two-week penetration tests leave companies exposed for the other 345 days of the year. Security firm Sprocket Security highlights this gap, arguing that as attack surfaces constantly evolve, businesses must adopt continuous security testing to effectively manage and mitigate real-world risks.
Neeraj Dhiman ·
Tech
Mayor Says Data Center Opponents Live in 'Shitty Houses'
The mayor of Shelbyville, Indiana, was recorded saying only people in "shitty houses" oppose a new $2 billion data center. The incident highlights the growing local resistance tech companies face when building new infrastructure.
Navdeep Kaur Mahal ·
Frequently asked questions
What is the main difference between confidential computing and traditional encryption?
Traditional encryption primarily protects data at-rest (on storage) and in-transit (across networks). Confidential computing extends this protection to data in-use, meaning while it is actively being processed in memory and by the CPU, using hardware-level isolation.
What is a Trusted Execution Environment (TEE) or secure enclave?
A TEE, or secure enclave, is a secure and isolated area of a main processor, guaranteed by the hardware itself. It prevents any code or data inside it from being accessed or modified by any other process, including the host operating system or hypervisor.
What are the primary use cases for confidential computing in 2026?
Key use cases include protecting proprietary AI models and sensitive data during inference, enabling secure multi-party data collaboration without exposing raw data, and safeguarding secrets like API keys and credentials within multi-tenant cloud environments.
Does confidential computing introduce significant performance overhead?
While early implementations had noticeable performance costs, hardware advancements by 2026 have significantly mitigated this. The overhead, which comes from memory encryption and enclave entry/exit operations, is now often negligible for many workloads, making it a practical trade-off for enhanced security.