A critical vulnerability in the open-source EDK2 UEFI firmware used in most servers worldwide lets attackers execute malicious code extremely early in the boot process, before most security tools activate, granting near-total control of affected systems.
arstechnica.com
The critical EDK2 UEFI vulnerability allows pre-boot code execution on nearly all enterprise and consumer servers, posing a widespread systemic risk to global IT infrastructure.
The two PHP2Shell vulnerabilities allow unauthenticated attackers to gain remote code execution on affected PHP servers, and CISA confirmed active public exploitation is underway.
The AI 'hacker' found one critical and three high-severity flaws in popular EPICS industrial control software that could disrupt research and critical industrial operations, highlighting both AI attack risks and defensive use cases.
The AI startup's 93-page SEC risk disclosure outlines seven catastrophic potential AI harms, from user blackmail to human extinction, as it prepares for a public Nasdaq listing.
The latest Google DeepMind generative world model promises more realistic physical interactions and human behavior, and will roll out to developers and Google AI Ultra subscribers soon.
The San Francisco startup plans to build a specialized AI inference cloud it claims is 40x faster than Nvidia GPUs, aiming to disrupt Nvidia's dominant position in the AI infrastructure market.