CacheWarp Attack: New Vulnerability in AMD SEV Exposes Encrypted VMs

November 14, 2023 at 02:27PM Researchers from the CISPA Helmholtz Center for Information Security have discovered a new software fault attack called CacheWarp that targets AMD’s Secure Encrypted Virtualization (SEV) technology. The attack exploits a vulnerability in SEV to infiltrate encrypted virtual machines and achieve privilege escalation. AMD has released a microcode update to address … Read more

Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack

November 14, 2023 at 01:45PM Researchers have discovered a new attack method called CacheWarp that affects AMD processors. It poses a risk to protected virtual machines by allowing hackers to hijack control flow, break into encrypted VMs, and escalate privileges. CacheWarp is a software-based fault injection attack resulting from an architectural bug in AMD CPUs. … Read more

AMD SEV OMG: Trusted execution undone by cache meddling

November 14, 2023 at 01:38PM Researchers have discovered a flaw in AMD’s SEV trusted execution environment called CacheWarp that allows attackers to manipulate cache lines and memory, potentially leading to arbitrary code execution, data exposure, or privilege escalation within a guest VM. AMD has been notified of the vulnerability and plans to issue patches to … Read more