Loading story…
AMD disclosed vulnerabilities affecting a broad range of processor, graphics, and accelerator products, including EPYC, Ryzen, Athlon, Threadripper, Instinct MI300A, and Radeon PRO V620 lines. The issues are tracked through AMD’s processor-vulnerability security resources, including bulletin AMD-SB-7009; public advisories did not specify vulnerability types, exploit conditions, or evidence of active exploitation.
Organizations should inventory affected AMD-based servers, desktops, mobile systems, embedded devices, workstations, and accelerators, then obtain and deploy the applicable platform-initialization (PI) firmware updates from their OEM or AMD. Administrators should verify that deployed firmware meets AMD’s published minimum non-affected versions; Radeon PRO V620 customers should contact AMD Customer Engineering for remediation guidance.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security issued advisory AV26-879 covering the affected AMD products and advised users and administrators to review AMD security information and apply required firmware or platform updates as they become available.
Multiple AMD processor and graphics product families, including EPYC, Ryzen, Athlon, Threadripper, Instinct MI300A, and Radeon PRO V620 products, were identified as affected by unspecified vulnerabilities. Minimum Platform Initialization firmware versions were listed as remediations for most affected families, while Radeon PRO V620 customers were directed to AMD Customer Engineering.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
4 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecyber.gc.ca
Open sourcecirt.gy
Open sourceamd.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AMD issued a security advisory covering vulnerabilities in multiple Windows and FPGA-related software products, including **AMD Power Design Manager**, **AMD Ryzen Master**, **AMD Ryzen Master SDK** components, the **Vitis Libraries Security Module**, **Vitis Embedded Single File Download for Windows**, and the **Vitis Unified Installer** for FPGAs and Adaptive SoCs on Windows. The advisory indicates that affected versions include all releases except the specific fixed versions identified by AMD, making the notice broadly relevant to enterprises using AMD management, development, or deployment tooling. Guyana's National CIRT circulated the advisory and urged users and administrators to review AMD's guidance and apply the necessary updates. The available reporting describes the notice as a mitigation and patching advisory rather than evidence of active exploitation, but organizations running the listed AMD software are being told to verify versions and move to the vendor-designated remediated releases.
Aug 14, 2026
AMD disclosed security advisory **AV26-800** for vulnerabilities affecting **AMD EPYC Series Processors** and **AMD EPYC Embedded Series Processors**. The issue is tied to research describing how attackers may extract **virtual machine secrets** through **power side channels** against systems using **AMD SEV-ES** and **SEV-SNP**, technologies intended to protect confidential workloads in virtualized environments. The **Canadian Centre for Cyber Security** issued a notice urging users and administrators to review AMD's product security guidance and apply vendor updates as they become available. Organizations running EPYC-based infrastructure, particularly cloud and virtualization environments relying on SEV protections, have been directed to monitor AMD advisories closely and prioritize remediation once patches or mitigations are released.
Aug 14, 2026
Microsoft disclosed and patched **CVE-2023-20588**, an AMD processor information disclosure vulnerability known as **AMD Speculative Leaks**, after including mitigations in its December 2023 security updates. The flaw affects multiple AMD CPU families, including **EPYC**, **Athlon**, and **Ryzen 3000-series** processors, and stems from divide-by-zero behavior that can cause the processor to transiently return random or stale data during speculative execution. The issue requires **local access** to exploit, but it was treated as a high-severity risk because sensitive data could be exposed from affected systems. Microsoft and CSIRT.SK said the vulnerability was identified by researchers from **Microsoft Azure Research** and **Vrije Universiteit Amsterdam**, and they urged organizations to apply Windows updates promptly. Guidance also advised developers to avoid using privileged data in divide-by-zero operations and to follow secure coding practices to reduce exposure.
Jul 24, 2026