# Researchers demonstrate attacks on AMD confidential virtual machines

_Published Friday, November 13, 2026 at 12:07 PM EST · Security, Infrastructure · Latest · Tier 2 — Notable_

![Researchers demonstrate attacks on AMD confidential virtual machines — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi28SrA-dW0l0kreAg1vMHHOgBRMM7lzxv5qg2FT2HzRxReJ96pxZP4Fjpm15fYWDDgWpbBI8iC119aE37t_kmQ4guoA70NUlJsdiA4hFvTg8fflx9fsKqUsGuoB-S9VS5pPd38EBVYRGmvKIT5EylE3IwEK8bBCp5CkLrdTwhbyUA2xWN_0iOynP33yE8/s1700-nu-rw-lo-l85-e365/amd-flaws.jpg)

Researchers demonstrated two attacks that let a malicious server host read data inside AMD SEV-SNP virtual machines, which are designed to protect workloads from the server's operator. Both attacks were tested in laboratories on EPYC processors.

Mior also lets an attacker modify virtual-machine memory and falsify signed reports identifying its software. It requires control of the hypervisor and BIOS, plus a device such as a graphics card. Skyfall recovered register values and a disk-encryption key in tests, though the key demonstration used a modified virtual machine.

AMD lists firmware and microcode fixes, with platform firmware targeted for November for Skyfall and December for Mior. Cloud customers depend on their providers to install host firmware updates.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/new-mior-and-skyfall-attacks-let-rogue.html)

---
Canonical: https://techandbusiness.org/newswire/E1vi8f51a2iZXKFJK6PI6C
Published: 2026-11-13T17:07:00.627Z
Story chronology: 2026-11-13T15:27:00.000Z
Retrieved: 2026-11-13T19:07:06.361Z
Publisher: Tech & Business (techandbusiness.org)