2026-10-28 17:10 UTC
The sound you are currently experiencing is the sound of a million script kiddies humming “time to do some sketchy shit, doo dah doodah, hope I get away with it, oh doodah day”
So, today’s entry in how #ai is destroying the internet, I give you a bug that affects most servers on earth, so that’s fun! It doesn’t affect home and small office users, or any other users who boot their devices solely from disk drives.
The vulnerability, tracked as #CVE-2026-97631, is a Sev 9.5 memory-corruption flaw in an #ICMP component that attackers can exploit to execute malicious code that runs before the operating system and firmware can implement defenses.
Discovered by teams at #anthropic and #google, it was surfaced by #AMI publishing a pull request with a fix for some of their hardware. Because the bug had been “embargoed“ while manufacturers worked on fixes, this is an unpatched bug in many cases, that has just been announced publicly.
#infosec #sysops #netops
https://arstechnica.com/security/2026/10/code-execution-flaw-in-uefi-firmware-threatens-most-servers-on-planet-earth/
Replies (0)
No replies.