Critical EDK2 UEFI flaw threatens most servers
On the radar
05 TOP STORIESArs Technica · 7 min read
Critical EDK2 UEFI flaw threatens most servers
Ars Technica reports a code-execution flaw in EDK2 UEFI firmware that could let attackers run code early in boot on many servers worldwide. The summaries give no CVE id, affected versions or patch status. Firmware flaws sit below the OS and are slow to patch, so server fleets need vendor firmware advisories.
BleepingComputer · 2 min read
CISA adds PHP2Shell to known-exploited list, orders agencies to patch
CISA added both critical PHP flaws to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch quickly. The Register says researchers have clocked attackers obtaining working shells. Wiz is publishing exploitation-attempt and remediation trends. Exploitation is now confirmed at scale, so unpatched PHP hosts should be treated as exposed.
BleepingComputer · 2 min read
GMO Internet breach: stolen data posted, customers told to shut down PCs
Hackers posted alleged customer data from GMO Internet after a cloud service breach, which GMO is verifying. BleepingComputer reports GMO urged customers to disconnect and shut down PCs after a threat actor who breached its Onamae Desktop Cloud threatened ransomware. The attacker can reach customer virtual desktops, not only GMO's own systems.
The Hacker News · 10 min read
AI agents now run attack operations and find severe ICS bugs
TrendAI analyzed three attacks on Japanese organizations in which AI agents, including the CyberStrikeAI framework, drove or assisted hacking operations. Separately, an AI agent reportedly found four severe bugs, one critical, in EPICS industrial control software in under four hours; CISA lists a CVSS 9.8 flaw in EPICS Base 7.0.10 and earlier. Attack automation and bug discovery are both getting faster.
BleepingComputer · 3 min read
UNM Health ransomware attack disrupts patient care and surgeries
The University of New Mexico Health Sciences Center disclosed a ransomware attack causing outages and disrupted care and surgeries. The Register reports classes were cancelled for a second day, with hospitals partly reopening. Recovery is running into days rather than hours.
Go a little deeper
EXPLORE BY TOPIC- 53 articles
Cyber security
Exploited-vulnerability news dominated: Apple, Adobe Commerce and Brotli fixes or listings, plus PHP2Shell. Supply-chain and vendor-side breaches (Convertr, Warp) continued, and AI is now both the discovery tool and the target.
Read 8 updates - 33 articles
Tech industry
Apple's M6 refresh led the product news, while memory supply, legal liability and surveillance policy carried the harder stories. Several items concern what happens when AI agents act with little human oversight.
Read 8 updates - 17 articles
AI
Model releases came with safety caveats, and Anthropic's IPO filing is generating a stream of risk and governance coverage. A claimed result from frontier labs on a complexity conjecture is the most technically notable item.
Read 8 updates - 13 articles
IT & infrastructure
A quiet day of release news. CPython is dropping its experimental JIT, the Linux 7.4 merge window is filling up, and Apple, Mozilla and Ghostty shipped updates.
Read 8 updates