Compromising Signal’s Contact Discovery Enclave
Author: Nihal, V12 Published: August 26, 2026 Source: https://v12.sh/blog/signal Summary Researchers at V12 report two critical object-lifetime vulnerabilities in Signal’s Contact Discovery Service (CDSI) that let the untrusted host server break the Intel SGX enclave boundary the service relies on for privacy. CDSI lets a Signal client learn which of its phone contacts use Signal … Read more