arXiv: Exploiting Per-Core Leakage: Electromagnetic Side-Channel Monitoring of Multicore Architectures

A new academic paper, published on arXiv, demonstrates a practical method for extracting sensitive data from multicore computer processors by measuring electromagnetic emissions from individual cores. This research highlights a significant side-channel vulnerability that could allow attackers to bypass software security measures, potentially compromising encryption keys or other confidential data processed on shared hardware. While this is a research publication rather than a regulatory mandate, it signals an emerging threat landscape that EU compliance professionals must monitor closely.

The findings are most relevant to organizations operating high-assurance cloud infrastructure, financial services, healthcare data processors, and any sector handling sensitive personal data under GDPR or sector-specific regulations like DORA or NIS2. Hardware vendors and managed service providers should also assess their exposure, as the attack exploits physical processor design rather than software flaws alone. Compliance teams should treat this as a forward-looking risk indicator, not an immediate enforcement action.

Compliance teams should first review their current threat modeling and risk assessments to determine if multicore processors are used in environments where electromagnetic side-channel attacks are feasible. Next, they should engage with hardware vendors to understand mitigations, such as core isolation or shielding, and factor these into procurement decisions. Finally, they should document this emerging risk in their risk registers and update incident response plans to account for physical-layer attacks, ensuring alignment with the EU’s evolving cybersecurity and AI safety frameworks.