Meta’s Muse is more than a chatbot. It is a digital worker that can read email, make purchases across the web, and act after users close the app. Wall Street sees a return on Meta’s vast AI spending. Cybersecurity experts see a more urgent question: should it hold the keys to our digital lives yet?
Dell’s US$95 billion AI-server backlog and US$74 billion revenue outlook show the AI boom moving beyond a few cloud giants into enterprise, sovereign and neocloud infrastructure procurement.
Meta has come back to the consumer, and it has come back armed. Muse reads inboxes, drives a browser, books travel and pays. Meta has not led with intelligence. It has led with containment. A model that says the wrong thing is an embarrassment. An agent that does the wrong thing is now an incident.
The Everest ransomware group has breached ASRock Rack, a major server hardware vendor, stealing 509GB of sensitive data including firmware, BIOS, and other critical files. The breach creates a significant supply chain risk, potentially allowing attackers to embed vulnerabilities in server hardware.
Cyber News Centre's cyber update for 23rd January 2026: ASRock Rack has been breached by the Everest ransomware group, exposing critical server hardware data and creating a significant supply chain risk.
ASRock Rack Inc., the enterprise server hardware subsidiary of Taiwanese manufacturer ASRock, was listed on the Everest ransomware group's dark web leak site on January 21, 2026. Established in 2013, the company specialises in cloud computing server hardware, including motherboards, servers, and storage solutions used in data centers worldwide.
Update: The Everest ransomware group, a Russian-speaking cybercriminal entity known for data exfiltration and access brokering, claims to have stolen a 509-gigabyte database from ASRock Rack. The stolen data reportedly includes highly sensitive technical documentation, firmware, software, BIOS files, diagnostic and installation tools, and Baseboard Management Controller (BMC) firmware. Everest has threatened to publish the full data set within nine days if its demands are not met, though no public ransom amount has been specified. The group provided screenshots of file trees as proof, with keywords like "data centre" and "diag" suggesting the authenticity of the stolen material.
This incident is part of a recent wave of attacks by Everest, which also targeted McDonald's India and an ASUS supplier. The group has a history of evolving its tactics, moving from simple data exfiltration to full-scale ransomware and, more recently, focusing on data-only extortion. This attack on a core hardware vendor highlights the increasing focus of ransomware groups on high-value enterprise targets with the potential for widespread downstream impact. The exfiltration of low-level hardware and firmware files represents a significant escalation in the group's operational capabilities and strategic targeting.
Why it Matters: This breach extends beyond a typical data leak and poses a severe supply chain risk to organizations globally, including in Australia, that rely on ASRock Rack server hardware. With access to firmware and BIOS-related material, attackers could potentially embed hidden vulnerabilities or backdoors directly into the hardware's core software. Malicious actors could repackage these authentic-looking drivers and firmware updates for malicious distribution, creating a trusted entry point into secure networks.
This incident serves as a critical reminder that the security of the digital supply chain is only as strong as its weakest link, and a compromise at the hardware level can undermine layers of software-based security, creating persistent and hard-to-detect risks for enterprise and government infrastructure.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
OpenAI's Astra can develop zero-day exploits, while a US$1 billion defence push seeks to give critical infrastructure teams the same machine-speed advantage.
The AI race is moving beyond model rankings. CrowdStrike’s new cyber superintelligence lab points to a market where proprietary data, trusted workflows and measurable outcomes may matter as much as raw capability.
Washington is building a two-track AI order: confidential security reviews for powerful closed models, regulatory relief for open-weight systems, and a G20 campaign for light-touch rules. The strategy may accelerate US innovation, but leaves a critical security gamble unresolved for global markets.
US authorities have dismantled QTFY’s QScan and QTRouter platforms, exposing a China-linked service model that blended exploit trading, automated scanning and hijacked IoT devices to reach critical infrastructure while concealing where attacks began.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
