Security Now: Linux and UEFI Flaws, Crypto Heists, and Consumer-Drive Encryption Concerns
· 2:48:35 · Watch on YouTube ↗
Summary
The hosts review a Linux kernel TCP race flaw and an EDK2 PXE-boot overflow, their constraints and mitigations, reported Binance and Poly Market thefts with uncertain attribution, AI-scraping opt-out controls, and concerns about consumer-drive encryption.
Key points
- Steve Gibson describes a timing-sensitive Linux kernel TCP use-after-free dating to version 4.4. He says no successful exploitation was known; Anthropic's claim that an unreleased Claude produced an exploit did not establish that it worked over the internet.
- CVE-2026-97631 is described as an EDK2 PXE-boot ICMP buffer overflow that could execute code before the operating system loads. Exploitation requires access to the target network and the brief PXE boot window; advice includes updating firmware, disabling PXE where unnecessary, and filtering ICMP at sensitive network boundaries.
- Fortune reportedly said Cisco is pursuing an AI-driven rewrite of 98% of its code over two years. Steve questions whether secure-by-default policy, rather than a broad rewrite, is the more important security issue.
- Binance disclosed a $6.3 billion theft. It first suspected a compromised engineer laptop, then reported additional breach points; Binance said it had not attributed responsibility and found no evidence of leaked wallet private keys. TRM and Chainalysis attributed the theft to Trader Traitor, while about $3 billion was reported frozen.
- Poly Market said 710 wallets lost $2.7 million and that it had refunded 95% of affected wallets. CNBC cited a person familiar with the matter linking the incident to a security breach at third-party provider Debug Bear; that connection was not presented as an independently confirmed finding.
- The hosts discuss a shared signal in robots.txt for publishers to opt out of AI-training scraping. Anthropic had adopted it, while Google and Microsoft planned support for the following year and OpenAI said it would implement it in coming months; compliance remains voluntary.
- A closing reverse-engineering excerpt says consumer-drive software used fast MD5-based password handling rather than PBKDF2 and an unkeyed MD5 file digest, raising concern that passwords may not adequately protect files.
Article Details
- Topics
- [11:57] Linux kernel TCP race condition, exploit uncertainty, and mitigations
- [20:07] Cisco's reported AI-assisted code rewrite and secure-by-default concerns
- [31:15] EDK2 PXE-boot vulnerability, exposure conditions, and mitigation
- [55:16] Binance cryptocurrency theft, response, and third-party attribution
- [01:02:21] Poly Market wallet theft and reported link to a third-party provider breach
- [01:12:02] Shared AI-training scraping opt-out signals and robots.txt limitations
- Consumer-drive reverse engineering raises concerns about MD5-based password handling and file protection