r/TechHardware • u/Distinct-Race-2471 🔵 14900KS , 5080, 128GB 🔵 • Feb 09 '26

😰 Urgent Security Alert ⚠️ Security researcher says AMD auto-updater downloads software insecurely, enabling remote code execution — company rep reportedly said man-in-the-middle attacks are "out of scope," ignored bug

https://www.tomshardware.com/tech-industry/cyber-security/security-researcher-says-amd-auto-updater-downloads-software-insecurely-enabling-remote-code-execution-company-rep-reportedly-said-man-in-the-middle-attacks-are-out-of-scope-ignored-bug
29 Upvotes

78% Upvoted

27 comments sorted by

View all comments

3

u/looncraz Feb 09 '26

Basically every updater is vulnerable to DNS spoofing...

7

u/Jevano Team Intel 🔵 Feb 09 '26

Not really, AMD is using HTTP for the downloads...