Conversation

Notices

1. Embed this notice
   Harry Sintonen (harrysintonen@infosec.exchange)'s status on Saturday, 07-Feb-2026 00:26:18 JST Harry Sintonen

   Apparently AMD's AutoUpdate downloads the updates over HTTP and executes them without any validation (presumably as SYSTEM user). AMD was notified of the vulnerability but according to them "attack requiring physical access to victim's computer/device, man in the middle or compromised user accounts" are out of scope.

   Madness.

   source: https://mrbruh.com/amd/

   #vulnerability #infosec #cybersecurity

   • Soatok Dreamseeker repeated this.
   • Embed this notice
     Harry Sintonen (harrysintonen@infosec.exchange)'s status on Saturday, 07-Feb-2026 08:09:43 JST Harry Sintonen

     in reply to

     You can do the following to remove the scheduled task that executes the vulnerable AMDAutoUpdate:

     1. Run cmd.exe as administrator

     2. schtasks /delete /TN AMDAutoUpdate /F

     This prevents the AMDAutoUpdate from executing.

     #infosec #cybersecurity #amd #ryzenmaster