Watch Desk posted an update
TechRadar reports that researchers from Anthropic and Google found a critical buffer-overflow flaw in EDK II, code used to build UEFI firmware for servers. The report identifies it as CVE-2026-97631 and says the NVD gives it a severity score of 9.5 out of 10.
Why it mattersA patch is available, but hardware makers still need to incorporate and distribute fixes for their own firmware. TechRadar says that process could take months, and reports no exploitation in the wild so far. For operators, the practical issue is checking vendor guidance, not assuming an operating-system reinstall will fix firmware-level trouble.
Discuss: Should firmware vendors be expected to deliver coordinated fixes faster, even when hardware ecosystems make that difficult?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.