AMD RCE Unfixed, SCOTUS Hands Dems Victory, Anti-Aging Vaccine?

A critical Remote Code Execution (RCE) vulnerability in AMD's AutoUpdate software, discovered by a security researcher, remains unaddressed by the company, according to multiple reports. The vulnerability allows for potential man-in-the-middle attacks, enabling malicious actors to replace legitimate updates with compromised ones.

The vulnerability stems from the software's use of HTTP for downloading executable updates, as detailed by a security researcher on Hacker News. This means that an attacker on the same network could potentially intercept and replace the update files. The researcher found that the update URLs are stored in the application's configuration file. Despite reporting the issue, AMD deemed it "out of scope" and did not consider it a vulnerability, according to information from multiple sources.

In other news, La Sapienza University in Rome, with 120,000 students, experienced a significant disruption to its computer systems for three days, suspected to be a ransomware attack, according to TechCrunch. Systems were shut down as a precaution, and communication channels were partially limited. While Italian news outlets reported a ransom demand, neither the university nor Italy's cybersecurity agency has confirmed the ransomware attack, and investigations are ongoing.

In unrelated news, the Supreme Court handed down a one-sentence order regarding California's newly gerrymandered maps, which are expected to give Democrats more seats, according to Vox.

Finally, research has found that a routine vaccine slows aging and cuts dementia risk, according to Vox. The shingles vaccine may be an elixir for keeping our brains and bodies younger.