Mior and Skyfall attacks steal AMD SEV-SNP VM data

Researchers and security teams have disclosed two new attacks, named Mior and Skyfall, that target AMD SEV-SNP virtual machines and can let rogue cloud hosts steal sensitive data. Mior allows a malicious host to read and modify VM memory and fake attestation reports by exploiting memory-routing during start-up, while Skyfall recovers saved register values and encryption keys using instruction timing flaws. AMD has released firmware and microcode updates to mitigate both vulnerabilities. Open article →