New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

Researchers have disclosed two attacks, Mior and Skyfall, that can be used by a malicious cloud host to access sensitive data within AMD SEV-SNP-protected virtual machines. These virtual machines are designed to prevent the server operator from accessing their contents. The Mior attack can not only read data but also modify a virtual machine's memory and generate a fake signed report about the software it is running. Both attacks require control of the server's hypervisor, with Mior also needing access to the server's BIOS. This vulnerability allows rogue cloud hosts to steal secrets from protected virtual machines.