I'm happy to announce our work has been accepted at ESORICS 2026: "A Systematic Look at Quality-of-Service Feature Effects on Side Channels in AMD SEV-SNP" Thanks to Carina Fiedler, @rayiizzz.bsky.social, @supersingular.bsky.social, @misc0110.bsky.social, and @gruss.cc for a fun collaboration!

Announcing my latest first-author paper, accepted to #DIMVA2026: ❄️ FROST: Fingerprinting Remotely using OPFS-based SSD Timing.

We measure SSD contention using the Origin-Private File System (OPFS), which allows any website to use up to 10GB (Firefox), or 60% of total disk space (other browsers), from JavaScript, without any user interaction or special permissions.

The underlying mechanisms are platform-agnostic. This is a feature, not a bug! Read the paper here: hannesweissteiner.com/publications... Thanks to Tobias Weiser, @rolicz.bsky.social , @snee.la , @responsible.fyi , @notimaginary.bsky.social and @gruss.cc for the collaboration!

Congratulations Dr. @responsible.fyi! Thank you for the 6 years in my teaching and then research team! You're a great teacher and researcher! I am incredibly proud and impressed by your excellent PhD thesis, great papers, and the independence you got! All the best for your next endeavors!

I'm looking forward to presenting my paper, "Continuous User Behavior Monitoring using DNS Cache Timing Attacks" at NDSS next week! We mount an Evict+Reload-style attack on the local DNS cache, detecting recently accessed domains and evicting to continuously monitor new accesses.

I'm excited to announce that my first first-author paper is accepted at NDSS 2026 🥳. Eviction Notice: Reviving and Advancing Page Cache Attacks Check it out at: snee.la/posts/evicti... @snee.la, @notimaginary.bsky.social, Lukas Maar, @gruss.cc from @isec-tugraz.bsky.social, @tugraz.bsky.social

Eviction Notice: Reviving and Advancing Page Cache Attacks

Foreword This blog post is a summarized and introductory write up of our paper recently accepted at NDSS 2026, “Eviction Notice: Reviving and Advancing Page Cache Attacks”. Read the full paper here. A...

snee.la

Today we reveal StackWarp: a new CPU vulnerability exploiting a synchronization bug in AMD’s stack engine across Zen 1–5 CPUs. It enables deterministic manipulation of Confidential VM's stack pointer, allowing RCE and privilege escalation via both control- and data-flow hijacking.

I just registered for uasc.cc -- uASC (the Microarchitecture Security Conference) is on February 3rd, in Leuven, Belgium. **Registration is free but mandatory!** I would be happy to see all of you there :) Especially from the Cologne and Ruhr area, it's just a train ride to Leuven -> join us!

I'll arrive at the #39c3 tomorrow evening, see you there!

DIMVA is looking for PC nominations! Feel free to nominate yourself or your peers! 💯 [mark your calendar] DIMVA 2026 will be held in Chania, Greece, July 1 - 3, 2026 🏖️🌞 Daniele Cono D'Elia and I look forward to your submissions!🥳

DIMVA Conference@dimvaconf.bsky.social · 11mo ago

DIMVA 2026 is happening! Nominate yourself or your colleagues to join the Program Committee (PC). Review Cycles: mid Dec - Feb & late Feb - Apr. Submit PC nominations here: dimva.org/pc-nominations Be part of #DIMVA26’s success — Looking forward to seeing the nominations submitted. #PC

Later in the morning, Jo van Bulck gave an insightful talk about attacking and defending Trusted Execution Environments (TEEs) and the evolution of confidential computing. #GSW25 #TEE

Thursday evening, @gruss.cc hosted a city tour, showing off the best spots in the inner city, climbing the "Schlossberg," and surprising first-time visitors and locals alike with many fun facts! #GSW25 #Graz

This morning, David Oswald started our last day at GSW with his talk "Breaching the Gates: Uncovering Hardware Weaknesses in Confidential Computing", giving an overview of power side-channels and fault attacks in confidential computing scenario. #GSW25 #sidechannels

In our second morning session, Stefan Mangard and @gruss.cc spoke about side-channel attacks in various settings - from phones to computers to networks - showing that side channels really are everywhere. #GSW25 #SideChannels

Social Event Part 1: Trip to the @zotterchocolates.bsky.social chocolate factory! We tasted our way through the factory with over 40 chocolate stations, experiencing the whole production process from the cocoa bean to the delicious end product! 😋🍫 #GSW25 #chocolate

Social Event Part 2: Our culinary adventure continues! For dinner we went to a traditional Styrian "Buschenschank", a restaurant serving cold spreads made of local foods and their own wine and juices. 😍 #GSW25 #buschenschank

For our first session today, Fabio Pierazzi talked about trends and challenges in AI for systems security. What an exciting start to Day 2 of GSW'25! #GSW25 #AI #SystemSecurity

In our second session, Christian Rossow shared an overview of CFI techniques and developments and showed which areas still need further research to improve the guarantees CFI can provide and the compatibility with language constructs. #GSW25 #CFI #Cybersecurity

This afternoon, our student team LosFuzzys hosted the Graz Security Week CTF! To keep the spirits high and minds sharp, we provided some pizza. ✨🍕 Congratulations to all winners! 🥳 1st place: "Computerclub St. Pölten (not)" 2nd place: "Zotter Fanclub" 3rd place: "Polund" #GSW25 #CTF

In the afternoon, we continued with "Advanced Branch Target Injection Attacks" by Kaveh Razavi: An awesome talk about how branch target injection aka spectre v2 attacks evolved since 2018! #GSW25 #spectre

Our last session of the day: The PhD Forum—here our participants got the chance to share their research in short 5-min presentations!  Hopefully, this will help them to get connected with others working on similar topics and spark some interesting discussions this week! #GSW25 #PhD #research

Here we go! Graz Security Week is starting any minute now! 🥳

Welcome to Graz! We wish you a great week. 😎

We're kicking-off our summer school Graz Security Week with a short introduction and our first talk by Maria Eichlseder about Lightweight Cryptography and its challenges. #GSW25 #lightweight #cryptography

Congratulations Dr. @giner.cc! It was great to have you in our team and I am proud of you that you have completed this journey with an excellent PhD thesis. Your works will have lasting impact on the community and I wish you the best for your next endeavors!

🎉 Congratulations to @notimaginary.bsky.social! 🎉 This week, he defended his PhD thesis “Attacking and Securing Leaky Systems at the Hardware-Software Boundary.”! We’re so excited for you and wish you all the best for the future!🌟 Check out the thesis here 👇 www.jonasjuffinger.com/phd-thesis.pdf

Congratulations Dr. @notimaginary.bsky.social! Was a pleasure to take part in your journey and I am really proud of you! Outstanding thesis and defense - you absolutely deserve the PhD! All the best for your future! You can all check out Jonas' PhD thesis here: www.jonasjuffinger.com/phd-thesis.pdf

If you're looking for something to do before or after #dimva25 in #graz, maybe hike up the Schöckl (1445m) www.bergfex.at/sommer/steie...

uASC 2026 will take place on February 3, 2026, in Leuven, Belgium, hosted by KU Leuven. We can't wait to see you next year! Cycle 1 Paper Submission Deadline is July 15, 2025! 👉 uasc.cc #uasc26