The AI race in 2026 has shifted from "who has the smartest model" to "who can afford the power and capital to run them at scale." When Google issues century bonds and Musk eyes orbital data centres, the $700 billion question is whether anyone can sustain this pace.
The $700 Billion Reckoning: Why Tech Titans Are Betting the Future on AI—And Borrowing Like Sovereigns to Do It
Dutch telecom Odido confirms major cyberattack breached 6.2 million customers' personal data including names, addresses, bank account numbers details sparking serious identity theft concerns across the Netherlands
The Everest ransomware group has breached ASRock Rack, a major server hardware vendor, stealing 509GB of sensitive data including firmware, BIOS, and other critical files. The breach creates a significant supply chain risk, potentially allowing attackers to embed vulnerabilities in server hardware.
Cyber News Centre's cyber update for 23rd January 2026: ASRock Rack has been breached by the Everest ransomware group, exposing critical server hardware data and creating a significant supply chain risk.
ASRock Rack Inc., the enterprise server hardware subsidiary of Taiwanese manufacturer ASRock, was listed on the Everest ransomware group's dark web leak site on January 21, 2026. Established in 2013, the company specialises in cloud computing server hardware, including motherboards, servers, and storage solutions used in data centers worldwide.
Update: The Everest ransomware group, a Russian-speaking cybercriminal entity known for data exfiltration and access brokering, claims to have stolen a 509-gigabyte database from ASRock Rack. The stolen data reportedly includes highly sensitive technical documentation, firmware, software, BIOS files, diagnostic and installation tools, and Baseboard Management Controller (BMC) firmware. Everest has threatened to publish the full data set within nine days if its demands are not met, though no public ransom amount has been specified. The group provided screenshots of file trees as proof, with keywords like "data centre" and "diag" suggesting the authenticity of the stolen material.
This incident is part of a recent wave of attacks by Everest, which also targeted McDonald's India and an ASUS supplier. The group has a history of evolving its tactics, moving from simple data exfiltration to full-scale ransomware and, more recently, focusing on data-only extortion. This attack on a core hardware vendor highlights the increasing focus of ransomware groups on high-value enterprise targets with the potential for widespread downstream impact. The exfiltration of low-level hardware and firmware files represents a significant escalation in the group's operational capabilities and strategic targeting.
Why it Matters: This breach extends beyond a typical data leak and poses a severe supply chain risk to organizations globally, including in Australia, that rely on ASRock Rack server hardware. With access to firmware and BIOS-related material, attackers could potentially embed hidden vulnerabilities or backdoors directly into the hardware's core software. Malicious actors could repackage these authentic-looking drivers and firmware updates for malicious distribution, creating a trusted entry point into secure networks.
This incident serves as a critical reminder that the security of the digital supply chain is only as strong as its weakest link, and a compromise at the hardware level can undermine layers of software-based security, creating persistent and hard-to-detect risks for enterprise and government infrastructure.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
Dutch telecom Odido confirms major cyberattack breached 6.2 million customers' personal data including names, addresses, bank account numbers details sparking serious identity theft concerns across the Netherlands
Australian firm FIIG Securities has been ordered to pay a $2.5 million penalty by the Federal Court following ASIC action over significant cybersecurity failures that led to a major data breach in 2023. The landmark case sets a new precedent for cyber resilience obligations for AFS licensees.
Victoria's largest not-for-profit private hospital group, Epworth HealthCare, has been targeted by a fake ransomware group known as 0APT. The group claims to have stolen 920GB of patient data, but evidence suggests it is a bluff designed to extort money through psychological warfare.
A critical 9.8‑rated flaw (CVE-2025-40551) in SolarWinds Web Help Desk is under active exploitation, letting unauthenticated attackers execute remote code and prompting urgent patch orders for government and enterprise users worldwide.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
