I'm excited to announce that my first first-author paper is accepted at NDSS 2026 🥳. Eviction Notice: Reviving and Advancing Page Cache Attacks Check it out at: snee.la/posts/evicti... @snee.la, @notimaginary.bsky.social, Lukas Maar, @gruss.cc from @isec-tugraz.bsky.social, @tugraz.bsky.social

Today we reveal StackWarp: a new CPU vulnerability exploiting a synchronization bug in AMD’s stack engine across Zen 1–5 CPUs. It enables deterministic manipulation of Confidential VM's stack pointer, allowing RCE and privilege escalation via both control- and data-flow hijacking.

Interested in physical side-channel attacks? Check out our open position: jobs.apple.com/en-us/detail...

CFP for uASC 25 is still open. We have rolling reviews, and 1 submission is already accepted. If you have interesting results on microarchitecture security (incl. weak threat models or reproducing prior work), check out the CFP at uasc.cc The CFP closes **Jan 28**