Mior and Skyfall Attacks Target AMD SEV-SNP VMs

# Mior and Skyfall Attacks Target AMD SEV-SNP VMs

https://gcdradar.vercel.app/incidents/mior-and-skyfall-attacks-target-amd-sev-snp-vms · AIR-2026-1955 · live

- Lane: Research
- Severity: 1 (Research / proof of concept): Research disclosure demonstrating virtual machine compromise requiring hypervisor or BIOS control.
- Fix status: Fix status unknown
- First reported: 2026-11-13
- AI role: No AI role
- Products: AMD SEV-SNP

## Summary

Researchers disclosed two attacks, Mior and Skyfall, allowing a rogue cloud host to read data inside AMD SEV-SNP-protected virtual machines. Mior can also modify VM memory and forge signed execution reports given host and BIOS control.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-13: New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs (https://thehackernews.com/2026/11/new-mior-and-skyfall-attacks-let-rogue.html)

## Sources

- 2026-11-13 The Hacker News: New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs https://thehackernews.com/2026/11/new-mior-and-skyfall-attacks-let-rogue.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.