New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs

Two attacks made public this week, Mior and Skyfall, allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines, which are built to keep the server operator out. Mior can also modify a VM’s memory and fake the signed report confirming which software it runs, but both attacks require control of the server’s hypervisor.