YHacker Newsscreenshots

Screenshot of arstechnica.com: Code-execution flaw in UEFI firmware threatens most servers on planet Earth

First screen, captured 2 days ago. Hover to scroll the page, or open the video.

Code-execution flaw in UEFI firmware threatens most servers on planet Earth

More from arstechnica.com →

Ars Technica article on CVE-2026-97631, a critical buffer overflow in EDK2's PXE boot code that allows pre-boot code execution on most servers, prematurely disclosed.

What HN thinks

Servers on Earth panic briefly, then remember they never reboot; space datacenter jokes ensue.

Overhyped, narrow attack surface
Exploitation needs local network access and a PXE boot, which many see as niche, and an attacker with that access could already tamper with PXE anyway.
Real risk to measured boot
Firmware code execution defeats attestation and measured boot, enabling BitLocker or TPM-only LUKS bypasses and abuse on shared bare-metal hosting networks.
Shrink the firmware codebase
UEFI implementations are huge and bug-ridden; minimal, purpose-built firmware or microkernels like seL4 are more defensible than endless patching.

Consensus: Most agree the headline overstates the threat to typical servers, while conceding firmware-level compromise matters for attestation and disk encryption. CVSS scores were widely dismissed as unreliable.

Recommended in the comments

seL4 (product): Small, verified privileged core that everything else can run under.
EDK II HTTPS Boot ↗ (tool): Suggested as a more secure alternative to PXE.
U-Boot (tool): Mentioned as a lighter standard boot interface for ARM boards.

Summarised by Claude from the comment thread 1 day ago.

Points: 284
Comments: 181
Best rank: #13
Posted: 2026-10-27 by DamnInteresting
Category: Security

uefi edk2 firmware-security pxe-boot cve-2026-97631 secure-boot tianocore

All captures:

Full page

Full-page screenshot of arstechnica.com

Captured 2 days ago. Click for the whole screenshot.

Looks similar

Screenshot of arstechnica.com: Just about every Windows/Linux device vulnerable to new LogoFAIL firmware attack

Just about every Windows/Linux device vulnerable to new LogoFAIL firmware attack (arstechnica.com)

196 points by AdmiralAsshat 2 years ago | 134 comments

Screenshot of arstechnica.com: AMD's trusted execution environment blown wide open by new BadRAM attack

AMD's trusted execution environment blown wide open by new BadRAM attack (arstechnica.com)

127 points by alecco 1 year ago | 29 comments

Screenshot of arstechnica.com: New attacks are diluting secure enclave defenses from Nvidia, AMD, and Intel

New attacks are diluting secure enclave defenses from Nvidia, AMD, and Intel (arstechnica.com)

41 points by voxadam 1 year ago | 34 comments

Screenshot of arstechnica.com: Record DDoS pummels site with once-unimaginable 7.3Tbps of junk traffic

Record DDoS pummels site with once-unimaginable 7.3Tbps of junk traffic (arstechnica.com)

36 points by trustinmenowpls 1 year ago | 32 comments

Screenshot of arstechnica.com: Record DDoS pummels site with once-unimaginable 7.3Tbps of junk traffic

Record DDoS pummels site with once-unimaginable 7.3Tbps of junk traffic (arstechnica.com)

51 points by Brajeshwar 1 year ago | 31 comments

Screenshot of arstechnica.com: Where hyperscale hardware goes to retire: Ars visits a big ITAD site

Where hyperscale hardware goes to retire: Ars visits a big ITAD site (arstechnica.com)

18 points by rntn 1 year ago | 0 comments

Related stories

Screenshot of bleepingcomputer.com: New Linux udisks flaw lets attackers get root on major Linux distros

New Linux udisks flaw lets attackers get root on major Linux distros (bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

linux udisks privilege-escalation vulnerability

Screenshot of promptarmor.com: Claude Cowork exfiltrates files

Claude Cowork exfiltrates files (promptarmor.com)

827 points by takira 9 months ago | 366 comments

PromptArmor threat intelligence report showing Claude Cowork is vulnerable to file exfiltration via indirect prompt injection due to code execution isolation flaws.

prompt-injection claude-cowork anthropic data-exfiltration

Screenshot of mrbruh.com: The RCE that AMD won't fix

The RCE that AMD won't fix (mrbruh.com)

343 points by MrBruh 8 months ago | 144 comments

Blog post describing a remote code execution vulnerability found by decompiling AMD's AutoUpdate software, which AMD declined to fix.

amd remote-code-execution vulnerability-disclosure auto-update

Screenshot of vkoskiv.com: My first contribution to Linux

My first contribution to Linux (vkoskiv.com)

633 points by vkoskiv 1 year ago | 76 comments

A blog post recounting the author's experience upstreaming their first Linux kernel patch, fixing a hardware issue on a 2005 Fujitsu Lifebook S2110.

linux-kernel kernel-patches fujitsu-lifebook device-drivers

Screenshot of codewall.ai: How we hacked McKinsey's AI platform

How we hacked McKinsey's AI platform (codewall.ai)

420 points by mycroft_4221 7 months ago | 168 comments

CodeWall blog post describing how its autonomous offensive agent found vulnerabilities in McKinsey's internal AI platform Lilli.

mckinsey lilli ai-security penetration-testing

Screenshot of hocus.dev: We replaced Firecracker with QEMU

We replaced Firecracker with QEMU (hocus.dev)

379 points by hugodutka 3 years ago | 137 comments

Hocus blog post by co-founder Hugo Dutka explaining why the company switched its development environment VMs from Firecracker to QEMU.

firecracker qemu virtualization microvm