[Single source] Mior and Skyfall expose data from AMD SEV-SNP VMs

Two newly publicized attacks, Mior and Skyfall, allegedly let a malicious server host read data inside AMD SEV-SNP-protected virtual machines. Both require control of the hypervisor, while Mior reportedly also requires BIOS control and can alter VM memory and forge the signed report describing the software being run.[1]New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMsthehackernews.com · rssOpen original sourceSee in source list

The Hacker News reported that Mior and Skyfall were disclosed during the week of publication. According to its account, a hostile host with hypervisor control could use either attack to inspect data that SEV-SNP is intended to keep hidden from the server operator.[1]New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMsthehackernews.com · rssOpen original sourceSee in source list

SEV-SNP is meant to protect a confidential VM even from the infrastructure operator. If the reported attacks work as described, they weaken that trust boundary by giving a rogue host a path to secrets inside the guest, while Mior could additionally undermine memory integrity and attestation.[1]New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMsthehackernews.com · rssOpen original sourceSee in source list

Organizations using SEV-SNP should assess whether their threat model includes a host operator capable of controlling the hypervisor or, for Mior, both the hypervisor and BIOS. The supplied evidence does not identify a patch, mitigation, affected product list, or detection method, so it does not support a more specific remediation recommendation.[1]New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMsthehackernews.com · rssOpen original sourceSee in source list

The report distinguishes the prerequisites and claimed capabilities: both attacks need hypervisor control, but only Mior is said to require BIOS control, modify VM memory, and forge a signed software report. The excerpt does not name affected processor generations or cloud services, explain exploit delivery, quantify practical success, or say whether fixes exist.[1]New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMsthehackernews.com · rssOpen original sourceSee in source list

The Hacker News characterizes Mior and Skyfall as attacks that let a malicious host read protected VM data. Its brief account attributes broader powers to Mior, but the supplied excerpt ends as it begins referring to researchers and therefore provides no complete researcher statement or independent response from AMD.[1]New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMsthehackernews.com · rssOpen original sourceSee in source list

The immediate development is public disclosure of two attacks in the same week. The evidence then separates their scope: Skyfall is described as enabling reads under a compromised hypervisor, while Mior adds a BIOS prerequisite and allegedly extends the impact to memory modification and forged attestation.[1]New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMsthehackernews.com · rssOpen original sourceSee in source list

1 independent groups, 1 updates, and 0 engagements.

A hypervisor is the privileged software layer that manages virtual machines, while the BIOS controls early server startup and hardware initialization. The report says both techniques depend on the former; Mior also depends on the latter and can allegedly falsify the signed attestation report used to confirm what software a protected VM runs.[1]New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMsthehackernews.com · rssOpen original sourceSee in source list

This account is based on a single supplied Hacker News item containing a short, truncated report and an HTTPS image. It supports the attack names, stated prerequisites, and claimed capabilities, but does not by itself provide technical validation, independent corroboration, vendor guidance, or remediation details.[1]New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMsthehackernews.com · rssOpen original sourceSee in source list