Skip to content

Trusted Platform Module

A hardware chip or firmware module, standardized by the Trusted Computing Group, that securely stores cryptographic keys and performs encryption.

Known aliases

  • TPM
  • TPM 2.0

Current stories

scienceOne report1 publisher

Anthropic's reset provable-inference deadline lapses without a public update

Anthropic's Sept 30 deadline for Phase 1 of its provable-inference project, already pushed back 138 days, passed with no public update. The lapse shows how little of a dated pledge in its Responsible Scaling Policy anyone outside the company can check.

Publishers:forkast.news

Reality

Evidence32
Adoption
Not scored
Hype gap+20
Incentives
Not scored
Confidence35
securityOne report1 publisher

Eclypsium counted 1,051 AI-infrastructure vulnerabilities across 12 vendors in 38 days

One Dell rollup alone carried 435 CVEs, among them a kernel privilege-escalation bug that had already shipped in two other Dell advisories. That is why a single vendor feed cannot describe a GPU estate.

Publishers:eclypsium.com

Reality

Evidence50
Adoption
Not scored
Hype gap+30
Incentives70
Confidence55
buildOne report1 publisher

TCG hands hardware buyers a version number: PC Client TPM Profile 1.07

The Trusted Computing Group has turned post-quantum readiness into something a purchase order can check. It also coined a label that means the part is not compliant yet.

Publishers:dev.to

Reality

Evidence34
Adoption
Not scored
Hype gap+32
Incentives62
Confidence42
securityOne report1 publisher

The refund scam that asks you to uninstall your antivirus, then writes down which one

Eleven look-alike sites run a scan whose score is capped at 30 out of 100, then record which of 28 security products the victim removed. Endpoint tampering by consent, over the phone.

Publishers:malwarebytes.com

Reality

Evidence74
Adoption24
Hype gap+8
Incentives72
Confidence64
buildOne report1 publisher

Pass-ta-key breaks Chrome's device trust, not WebAuthn: harden the endpoint, keep the rollout

Unit 42's three techniques all assume malware is already running on the box. That makes this an endpoint and browser-profile problem, not a reason to stall a passkey deployment.

Publishers:dev.to

Reality

Evidence44
Adoption24
Hype gap+12
Incentives41
Confidence42