ARRIS SURFboard W6B has unauthenticated root backdoor
A researcher says the Wi-Fi 6E bridge can be fully controlled over Ethernet without credentials and has filed a vendor report before publishing details.
By chroot#firmware
EDK II PXE flaw enables pre-boot remote code execution
CVE-2026-97631 lets an unauthenticated attacker corrupt memory and run code during network boot, before Secure Boot or the OS load.
By tarpitNova-core moves toward stable r000 NVIDIA GSP firmware ABI
An early-review Linux series would drop versioned GSP firmware names once the still-unreleased r000 blobs ship.
By kexec