A recent security report highlighted a wide range of prominent developments in the global cybersecurity landscape, including critical vulnerabilities in server infrastructure, developments in AI-based attacks, and incidents of data leaks and breaches of corporate and government systems.
Critical Vulnerability Threatens Majority of Global Servers
Researchers have uncovered a buffer overflow vulnerability registered as CVE-2026-97631, which has existed for 16 years in the open-source TianoCore EDK II code. This code is used by the majority of server and data storage vendors worldwide through firmware providers such as AMI, Insyde, and Phoenix. The flaw allows an attacker with access to the local network to send a massive ICMP error message during the device's network boot process to freeze the operation or execute code with the highest privileges before defenses like Secure Boot are activated.
Dispute Over the Scope of Anthropic Systems Breach
Anthropic has entered into a dispute with a startup called Cathedral, founded by former employees of what is known as DOGE. The startup claimed that its intelligent agents managed to breach Anthropic's internal systems in less than 12 hours by exploiting third-party business software and accessing meeting minutes and payroll data. For its part, Anthropic confirmed that the breach was limited to a restricted set of HR, sales, and IT systems, emphasizing that Claude model conversations, source code, and model weights were not affected, and warning that the startup had violated the rules of the bug bounty program.
What Practically Changes for Organizations?
These developments reflect a qualitative shift in the nature of cyber risks. On one hand, inherent vulnerabilities in firmware such as UEFI pose a cross-infrastructure risk that requires urgent updates from manufacturers. On the other hand, the increasing use of AI-powered intelligent agent tools in conducting reconnaissance and automated attacks is emerging, as seen in warnings from security firms regarding groups like Gold Ogre and the employment of AI in ransomware and remote control software.