// Infrastructure

Source: Ars Technica

Cloud GPU providers face an immediate security crisis. Researchers have weaponized Rowhammer bit-flip vulnerabilities to escape containerized environments and achieve root access on host machines. GPU scarcity forces providers like AWS and Lambda Labs to partition $8,000+ accelerators among dozens of untrusted users, making this attack vector especially dangerous. The breach undermines the isolation model that makes GPU-sharing economically viable, forcing providers to choose between expensive hardware mitigations, software patches that degrade performance, or architectural redesigns of their multi-tenant stacks. The pressure to offer cheaper GPU access—intensifying as AI workload demand drives competition—incentivizes tighter packing and weaker isolation boundaries, compounding the problem.

Source: The Register

Physical IoT devices in low-security zones like break rooms are becoming reliable entry points for attackers because IT teams assume consumer-grade appliances fall outside their threat model—but networked coffee makers, printers, and vending machines sit on the same corporate network as sensitive systems. The vulnerability is organizational negligence: nobody owns the security of the breakroom, so nobody patches it. Every connected object becomes an implicit backdoor when IT assumes perimeter defense is sufficient.