Menu

Monthly Archives: October 2024

Several security issues were fixed in the Linux kernel.

OpenAI updates API with model distillation, prompt caching abilities
Ransomware crew infects 100+ orgs monthly with new MedusaLocker variant
Brits hate how big tech handles their data, but can’t be bothered to do much about it
How to use extension methods in C#
Understanding VBS Enclaves, Windows’ new security technology

https://security-tracker.debian.org/tracker/DSA-5782-1

https://security-tracker.debian.org/tracker/DSA-5781-1

Smashing Security podcast #387: Breaches in your genes, and Kaspersky switcheroo raises a red flag
OpenAI previews Realtime API for speech-to-speech apps
700K+ DrayTek routers are sitting ducks on the internet, open to remote hijacking
Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing
Why system resilience should mainly be the job of the OS, not just third-party applications

Building efficient recovery options will drive ecosystem resilience

NIST’s security flaw database still backlogged with 17K+ unprocessed bugs. Not great

* bsc#1230986 Cross-References: * CVE-2024-38286

‘Patch yesterday’: Zimbra mail servers under siege through RCE vuln

A protocol flaw was fixed in AsyncSSH.

Docker tutorial: Get started with Docker
Spring AI: An AI framework for Java developers
Microsoft releases official OpenAI library for .NET
The fix for BGP’s weaknesses has big, scary, issues of its own, boffins find

PHP version 8.3.12 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is bypassable

Update to new upstream version (closes rhbz#2237124)

PHP version 8.3.12 (26 Sep 2024) CGI: Fixed bug GHSA-p99j-rfp4-xqvq (Bypass of CVE-2024-4577, Parameter Injection Vulnerability). (CVE-2024-8926) (nielsdos) Fixed bug GHSA-94p6-54jq-9mwp (cgi.force_redirect configuration is bypassable

Several packages have been updated for Slackware 15.0 and -current to fix rpath security issues.

* bsc#1230698 Cross-References: * CVE-2024-41996

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Euro cops arrest 4 including suspected LockBit dev chilling on holiday
The AI Fix #18: ChatGPT’s false memories, and would an inner critic stop AI hallucinations?
JDK 24: The new features in Java 24
Evil Corp’s deep ties with Russia and NATO member attacks exposed
NCA unmasks man it suspects is both ‘Evil Corp kingpin’ and LockBit affiliate

From the apps on our smartphones to chatbot assistant services, artificial intelligence (AI) is transforming our lives in both big and small ways. But as exciting as AI can be, it’s also important to understand its potential risks. October is Cybersecurity Awareness Month, making it the perfect time to become more cyber-savvy about AI. Let’s […]

October is the month for pumpkin spice and all things spooky. But protecting your personal information online doesn’t need to be scary. For more than 20 years now, October has also been recognized as Cybersecurity Awareness Month. In our digitally connected world, apps and online accounts can make our lives much more convenient. Sadly, they […]

As October rolls around, it’s time to focus on cybersecurity. After all, it’s Cybersecurity Awareness Month—a perfect reminder to check in on the safety of your identity. If you’ve ever had your identity stolen or know someone who has, you understand how serious the problem is. From text scams to stolen passwords, criminals are finding […]

Two good Visual Studio Code alternatives

Python could be made to bypass some restrictions if it received specially crafted input.

The battle cry of 2025: Do cloud local!
The worst programmer I know
Breaking through AI data bottlenecks
JRuby 10 due to arrive in early-2025
Australian e-tailer digiDirect customers’ info allegedly stolen and dumped online