Technology

5 Systems-Level Attack Surfaces That Are Architectural Consequences of Edge-Local Deployment (Imperial College London)

Source

SemiEngineering

Published

Mar 2, 2026

TL;DR

AI Generated

Researchers from Imperial College London and Bytedance have released a technical paper titled "Systems-Level Attack Surface of Edge Agent Deployments on IoT." The paper discusses the security analysis of three deployment architectures (cloud-hosted, edge-local swarm, and hybrid) using a home-automation testbed. It identifies five systems-level attack surfaces, such as coordination-state divergence and induced trust erosion, and highlights security risks in agent-controlled IoT systems. The study emphasizes the importance of deployment architecture in determining security risks in IoT systems.

Read Full Article

Linux exploit instantly grants administrator access on most distributions since 2017 — cryptography optimization snafu grants root privileges to local users

A recent Linux exploit, CVE-2026-31431, allows local unprivileged users to gain root access instantly on most Linux distributions since 2017. The exploit affects popular distros like Ubuntu, RHEL, Suse, and Amazon Linux, as well as Windows' WSL2. The vulnerability, discovered by Xint Code researchers, involves a cryptography optimization flaw that grants administrator privileges through a devious attack on the AF_ALG socket. While a patch has been released, some distributions may still be vulnerable, requiring mitigation methods like disabling AF_ALG sockets. The exploit occurs in memory without leaving detectable traces on disk, making it challenging to detect with security software.

Tom's Hardware•

6 hours ago

The most severe Linux threat to surface in years catches the world flat-footed

A critical Linux vulnerability, named CopyFail (CVE-2026-31431), has been disclosed by security researchers, allowing unprivileged users to gain root access across various Linux distributions. The exploit code, released by Theori, works universally without modification, posing a significant threat to data centers and personal devices. While the Linux kernel security team patched the vulnerability in several versions, many distributions had not yet implemented the fixes at the time of the exploit's release. This flaw enables attackers to execute malicious activities like hacking multi-tenant systems and creating backdoors, emphasizing the severity of the issue.

Ars Technica•

20 hours ago

MIT Technology Review

Exclusive eBook: Inside the stealthy startup that pitched brainless human clones

The exclusive eBook delves into R3 Bio, a startup proposing brainless human clones as backup bodies for longevity. The startup's ethically charged vision raises concerns about cloning ethics. The eBook, available only to subscribers, explores the controversial pursuit of human longevity through cloning. Antonio Regalado's work sheds light on the startup's startling concept and its potential implications.

MIT Technology Review•

22 hours ago

Crucial Taiwan undersea cable severed by old shipwreck — backup microwave communications activated to keep population connected

A shipwreck off Dongyin island in Taiwan has severed the undersea cable connecting it to Beigan Island, prompting the activation of backup microwave communications to maintain connectivity for the 1,500 residents. The Matsu Islands' strategic location near mainland China and the Taiwan Strait makes them crucial for Taiwan's military presence. While this incident was due to natural causes, it underscores Taiwan's vulnerability in its global connections. Recent suspicions of deliberate undersea cable damage by Chinese ships have led Taiwan to increase defensive measures and penalties for sabotage attempts. Despite wireless backups, physical undersea cables remain essential for reliable and high-bandwidth internet connections.