In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak

What happened

Only machines that use network boot are exposed, and the flaw, found by Anthropic and Google researchers, became public months ahead of a planned January disclosure after AMI published a code fix, leaving organizations to seek firmware updates from their vendors. Anthropic, which received the findings through its bug bounty program, says only a limited set of sales, HR and IT systems was reached, that it cut off the startup’s access the same day, and that Claude conversations, source code and model weights were not affected. Anthropic is an artificial intelligence company based in San Francisco, and its products and services include Claude and Claude Code. Cloudflare is an information and communications technology company based in San Francisco.

It also accuses Cathedral of breaking the bounty program’s rules by not disclosing all of its activity. The outage blocked the 24-hour and 48-hour reports that track last-minute spending on specific races, although past filings remained searchable.

Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware (software written to damage a system or steal from it). Artificial Intelligence Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware.

This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers stay well-informed about the evolving cybersecurity environment. Here are this week’s highlights: Iran suspected in US military freezer hacks US officials suspect Iran-linked hackers caused freezer malfunctions that spoiled food at around six military base commissaries starting in late August, Nextgov reports, citing people familiar with the matter.