New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

Researchers disclosed two attacks, Mior and Skyfall, that let malicious hosts access and manipulate data inside AMD SEV-SNP-protected VMs by exploiting vulnerabilities during VM startup. Both attacks require control over the server's hypervisor, with Mior also needing BIOS and PCIe device control. AMD has released firmware and microcode patches to address these vulnerabilities, advising customers to update BIOS from server manufacturers.