Security · High impactFan score 20 · Tier C
New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs
The Hacker News ·
The Brief
- Two attacks, Mior and Skyfall, were made public this week.
- Both let a malicious cloud host read data inside AMD SEV-SNP-protected virtual machines.
- Mior can also modify a VM's memory and forge the signed report that attests which software it runs.
Why it matters
AMD SEV-SNP is meant to keep a VM's data private even from the host operator. If these attacks hold, that guarantee does not hold against a malicious host, which matters for anyone relying on confidential computing in the cloud.
Who’s affected
- Teams running workloads on AMD SEV-SNP confidential VMs
- Cloud customers relying on SEV-SNP to protect data from the host operator
- #confidential-computing
- #amd
- #sev-snp
- #virtualization
- #cloud-security
- #vulnerability
Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server's operator out. One of them, Mior, can also modify a VM's memory and fake the signed report confirming which software it…
Timeline
Mior and Skyfall attacks made public
The Hacker News
New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs