Researchers demonstrate attacks on AMD confidential virtual machines

Image: Primary

Published Friday, November 13, 2026 · 12:07 PM EST

Researchers demonstrated two attacks that let a malicious server host read data inside AMD SEV-SNP virtual machines, which are designed to protect workloads from the server's operator. Both attacks were tested in laboratories on EPYC processors. Mior also lets an attacker modify virtual-machine memory and falsify signed reports identifying its software. It requires control of the hypervisor and BIOS, plus a device such as a graphics card. Skyfall recovered register values and a disk-encryption key in tests, though the key demonstration used a modified virtual machine. AMD lists firmware and microcode fixes, with platform firmware targeted for November for Skyfall and December for Mior. Cloud customers depend on their providers to install host firmware updates.

Sources

The Hacker News

In this story

AMD

Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Infrastructure AI

Nscale filing reveals $5.5B debt and larger Nvidia financing commitment

Nscale had $5.5B in debt in September, up from $137.4M in June, Bloomberg reported, citing an amended S-1 filing. Nvidia committed $2B of the data center developer's $3B+ convertible financing; Nscale previously disclosed $1B.

Capital AI

ValkaAI extends pre-seed funding round to €13 million

Czech startup ValkaAI has extended its pre-seed funding round to €13 million, with backing from Look AI Ventures and ff Venture Capital. The company announced €12 million in initial external funding in February 2026.

Products Infrastructure

Smartbird warns most convertible-note funding remains optional

Smartbird, formerly Allbirds, says only the initial $8.25 million of its convertible-note facility has been invested, while the remaining $91.75 million is solely at noteholders' option.

Capital Infrastructure

NeuralSat raises €2.9 million for satellite relay and computing network

Germany's NeuralSat has secured €2.9 million in pre-seed funding to develop a network that would relay satellite data and process it in orbit. Capnamic Ventures and Bayern Kapital led the round.

AI Capital

DeepX plans more than $100 million for chip using Samsung's 2 nanometer process

South Korean startup DeepX plans to spend more than $100 million developing its next artificial intelligence chip, Bloomberg reported.

Security

Uber notifies drivers of license data theft through Fireworks AI

Uber is notifying thousands of drivers that their personal and driver's license information was stolen in an October breach at Fireworks AI, TechCrunch reported. Notices filed this week say attackers stole internal credentials from the provider and used them to access Uber data.