[jsmith99]

Nothing new. This attack is demonstrated here many times and the Microsoft docs discuss a similar attack using self encrypting drives. The counter measure is to use a virtual TPM built into the CPU or to use TPM+PIN (which is standard practice for security).

[p_l]

Another piece is to use encrypted session where the traffic between OS and TPM is encrypted as well.