Summary
SecurityWeek's latest roundup covers stories that may have slipped under the radar this week.
Highlights
UEFI flaw affects most servers (CVE-2026-97631)
A critical, 16-year-old buffer overflow in TianoCore EDK II, used via firmware suppliers such as AMI, Insyde and Phoenix. An attacker on the local network can send an oversized ICMP error message during PXE network boot to hang the process or, if the firmware build is known, run code at the highest privilege before Secure Boot takes effect. Only machines using network boot are exposed. Anthropic and Google researchers found it; it became public ahead of a planned January disclosure after AMI published a fix. Get updates from your hardware vendor.
Cloudflare Workers AI and SGLang cross-tenant leak
Between August 27 and September 9, 155 responses from the GLM 5.3 model on Workers AI contained data from other customers' requests, all involving prompts over 681,280 tokens. A KV cache smaller than the advertised context window, plus an SGLang bug, let over-length requests read earlier sessions' cache. Cloudflare found no evidence of deliberate exploitation; SGLang users should update to 0.5.22 or later.
Anthropic disputes Cathedral's intrusion claims
Cathedral, a startup founded by former DOGE staff, claims its AI agents reached Anthropic's internal systems in under 12 hours via third-party business software, including meeting transcripts and salary data. Anthropic, which got the findings through its bug bounty, says only limited sales, HR and IT systems were reached, that access was cut the same day, and that Claude conversations, source code and model weights were unaffected. It accuses Cathedral of breaking bounty rules.
Iran suspected in military freezer hacks
US officials suspect Iran-linked hackers caused freezer malfunctions at about six military commissaries since late August, per Nextgov. The probe is joint with French authorities, after attackers overrode refrigeration controls at about 350 French establishments earlier this month.
Other items
- University of Copenhagen: a test environment breach exposed data on about 525,000 current and former members, including CPR numbers for many; ID card PINs for ~20,000 people were reissued.
- FEC: e-filing was taken offline after a breach attempt a week before the midterms; restored October 28.
- ENGIE: customer data (names, contact details, contract and supply point IDs) stolen via a sales-partner prospecting tool; French customers only.
- Fake AI bots: Cequence tracked one actor rotating through ~32 identities impersonating OpenAI, Anthropic, Meta and Perplexity crawlers to scan for
.envfiles, cloud credentials and SSH keys. - North Korean IT workers: John Allen Kurrle Jr. pleaded guilty to wire fraud conspiracy (up to 20 years); OFAC sanctioned 10 individuals and one entity.
- AI-enabled threats: Sophos reports Aur0ra ransomware operators used AI agents orchestrated through Cursor; Cisco Talos described the AI-integrated NIK C2 framework; Symantec found a grey-market relay rerouting Codex and Claude Code CLI traffic.
- Rockwell added OEM tools to SecureOT for EU Cyber Resilience Act compliance.
Takeaways
- Patch firmware via vendors and restrict PXE boot to trusted network segments.
- Treat multi-tenant AI inference as a data-isolation risk; pin patched serving software.
- Block unverified "AI crawler" user agents that probe for secrets, and keep secrets out of web roots.