Release of Technical Report into the AMD Security Processor
Summary: Google Project Zero and the Google Cloud security team released a technical report on a security review of the AMD Secure Processor (ASP), the isolated ARM processor in AMD EPYC CPUs that provides a root of trust and controls secure system initialization. The review, conducted on 3rd Gen AMD EPYC CPUs codenamed "Milan" with full AMD cooperation and access to ASP source code and production samples, found 19 issues, ranging from incorrect use of cryptography to memory corruption in ASP firmware, all of which AMD has fixed in public security bulletins.
What you should know: The ASP sits beneath everything it manages, so a firmware flaw there can compromise the security of all systems under its control - and this review of one generation of EPYC CPUs surfaced 19 such issues, from cryptography misuse to memory corruption.
Read the original at Google Project Zero ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026The Last List of 2009 - Predicting Security in 2010 Cyber Risks ·