Security AlertHigh
Researchers say Mior and Skyfall can break AMD SEV-SNP protection
Nov 13, 2026 · Summarized by Fundy Tech from The Hacker News
The 30-second version
Two new attacks can let a malicious host read data from AMD SEV-SNP protected virtual machines. One attack can also alter memory and fake attestation reports.
Key points
- Mior and Skyfall were shown in lab tests on AMD EPYC processors.
- Mior can modify VM memory and fake signed reports.
- Both attacks need control of the hypervisor.
- AMD lists firmware and microcode updates dated August 12.
Why it matters
If your business uses confidential computing or hosted servers, these findings matter for trust and isolation. The attacks target the host side, not the VM itself. That means cloud and datacentre operators may need firmware and platform updates to protect customer workloads.
Who’s affected: AMD SEV-SNP protected virtual machines
What to do
- Track firmware and BIOS updates from your server maker.
- Ask your provider whether AMD SEV-SNP mitigations are deployed.
- Review trust assumptions for confidential workloads.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.