Remote security exploit in all 2008+ Intel platforms – SemiAccurate
This looks quite nasty security issue for very many PCs.
It seems that Intel has confirmed it. You can read their advisory here.
The short version is that every Intel platform with AMT, ISM, and SBT from Nehalem in 2008 to Kaby Lake in 2017 has a remotely exploitable security hole in the ME (Management Engine) not CPU firmware.