Alex Matrosov

Security researcher at Anthropic, co-discoverer of CVE-2026-97631

Appears in 1 story

Stories

UEFI firmware flaw lets network attackers hijack most servers during boot

New Capabilities

Co-discoverer of the vulnerability

A 16-year-old bug in the firmware that boots most servers lets a network attacker run code before the OS or Secure Boot loads. The flaw sits in TianoCore EDK II, the open-source base behind virtually every UEFI firmware vendor and Microsoft's Project Mu.

Updated 2 hours ago