New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

Researchers and security teams have disclosed two new attacks, named Mior and Skyfall, that target AMD SEV-SNP virtual machines and can let rogue cloud hosts steal sensitive data. Mior allows a malicious host to read and modify VM memory and fake attestation reports by exploiting memory-routing during start-up, while Skyfall recovers saved register values and encryption keys using instruction timing flaws. AMD has released firmware and microcode updates to mitigate both vulnerabilities. Open article →