New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs
Two new attacks, Mior and Skyfall, allow malicious cloud hosts to steal data from AMD SEV-SNP protected VMs.
Two new attacks, Mior and Skyfall, have been disclosed that enable a malicious cloud host to access data within AMD SEV-SNP protected virtual machines. Mior additionally has the capability to alter a VM's memory and falsify software attestation reports. Both attacks require hypervisor control, with Mior also needing BIOS control.
AI summary of the linked source. Not reviewed by an editor. How this works
Run virtual machines?
Get an email when a new story names virtual machines, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors- Cloud security posture management (CSPM and CNAPP)
Misconfigured cloud storage and over-permissive roles get caught before they leak.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.