New AMD SEV-SNP target host-level attacks exposed Mior and Skyfall, two attacks that allow a malicious cloud operator to extract secrets from AMD SEV-SNP virtual machines. The problem cuts at one of the core values ​​of secret computing: protecting guest workloads even from the infrastructure owners. The affected trust model is plotted in the AMD SEV-SNP layout. Practically speaking, this diverts the risk from compromise to abuse. For tenants using SEV-SNP to protect keys, certificates, or sensitive processing in powerful cloud environments, the findings challenge assumptions about hypervisor-estimated trust boundaries. Open sources - closed narratives.

New AMD SEV-SNP target host-level attacks exposed Mior and Skyfall, two attacks that allow a malicious cloud operator to extract secrets from AMD SEV-SNP virtual machines. The problem cuts at one of the core values ​​of secret computing: protecting guest workloads even from the infrastructure owners. The affected trust model is plotted in the AMD SEV-SNP layout. Practically speaking, this diverts the risk from compromise to abuse. For tenants using SEV-SNP to protect keys, certificates, or sensitive processing in powerful cloud environments, the findings challenge assumptions about hypervisor-estimated trust boundaries. Open sources - closed narratives.