Loading story…
AMD issued a security advisory covering vulnerabilities in multiple Windows and FPGA-related software products, including AMD Power Design Manager, AMD Ryzen Master, AMD Ryzen Master SDK components, the Vitis Libraries Security Module, Vitis Embedded Single File Download for Windows, and the Vitis Unified Installer for FPGAs and Adaptive SoCs on Windows. The advisory indicates that affected versions include all releases except the specific fixed versions identified by AMD, making the notice broadly relevant to enterprises using AMD management, development, or deployment tooling.
Guyana's National CIRT circulated the advisory and urged users and administrators to review AMD's guidance and apply the necessary updates. The available reporting describes the notice as a mitigation and patching advisory rather than evidence of active exploitation, but organizations running the listed AMD software are being told to verify versions and move to the vendor-designated remediated releases.
See real exploitation activity before you spend the cycle.
2 events from the most recent confirmed update back to the earliest known activity.
Guyana National CIRT published an advisory on August 13, 2026 highlighting AMD's bulletin and recommending that users and administrators review the updates and apply them as necessary. The notice framed the issue as an update-and-mitigate advisory rather than active exploitation.
On August 11, 2026, AMD published security bulletin AMD-SB-8015 describing vulnerabilities affecting multiple AMD software products, including Power Design Manager, Ryzen Master components, and Vitis-related Windows tooling. The advisory identified fixed versions for the affected products and indicated that other versions were vulnerable.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AMD disclosed vulnerabilities affecting a broad range of processor, graphics, and accelerator products, including **EPYC**, **Ryzen**, **Athlon**, **Threadripper**, **Instinct MI300A**, and **Radeon PRO V620** lines. The issues are tracked through AMD’s processor-vulnerability security resources, including bulletin `AMD-SB-7009`; public advisories did not specify vulnerability types, exploit conditions, or evidence of active exploitation. Organizations should inventory affected AMD-based servers, desktops, mobile systems, embedded devices, workstations, and accelerators, then obtain and deploy the applicable platform-initialization (PI) firmware updates from their OEM or AMD. Administrators should verify that deployed firmware meets AMD’s published minimum non-affected versions; **Radeon PRO V620** customers should contact AMD Customer Engineering for remediation guidance.
Sep 3, 2026
Dell issued security advisory **`AV26-821`** warning that multiple vulnerabilities affect several product lines, including **PowerFlex appliance**, **PowerFlex Rack**, **PowerFlex Software**, **Dell Client Platform for Multiple AMD BIOS**, **Dell Client Platform BIOS for 2026.3 IPU**, and **Dell VPLEX**. National cyber authorities, including the **Canadian Centre for Cyber Security** and **CIRT.GY**, republished the notice and highlighted that specific affected version thresholds apply across multiple PowerFlex offerings. The advisory material does not disclose CVE identifiers or active exploitation details in the available summaries, but it directs organizations to Dell’s security portal for product-specific guidance and remediation updates. Administrators were urged to review the relevant Dell advisories, identify impacted versions in their environments, and apply vendor fixes or updates as they become available to reduce exposure across storage infrastructure and client platform BIOS deployments.
Aug 17, 2026
AMD disclosed security advisory **AV26-800** for vulnerabilities affecting **AMD EPYC Series Processors** and **AMD EPYC Embedded Series Processors**. The issue is tied to research describing how attackers may extract **virtual machine secrets** through **power side channels** against systems using **AMD SEV-ES** and **SEV-SNP**, technologies intended to protect confidential workloads in virtualized environments. The **Canadian Centre for Cyber Security** issued a notice urging users and administrators to review AMD's product security guidance and apply vendor updates as they become available. Organizations running EPYC-based infrastructure, particularly cloud and virtualization environments relying on SEV protections, have been directed to monitor AMD advisories closely and prioritize remediation once patches or mitigations are released.
Aug 14, 2026