Menu

Category Archives: All

Everything

New cybersecurity rules land for Defense Department contractors

Important: postgresql:15 security update

Important: postgresql:16 security update

Important: mingw-sqlite security update

Important: kernel-rt security update

Moderate: kernel-rt security update

Moderate: kernel-rt security update

Defense Dept didn’t protect social media accounts, left stream keys out in public
No gains, just pains as 1.6M fitness phone call recordings exposed online
The AI Fix #67: Will Smith’s AI crowd scandal, and gullible agents fall for scams
What the Plex? Streaming service suffers yet another password spill
When AI nukes your database: The dark side of vibe coding
Nokia successor HMD spawns secure device biz with Euro-made smartphone
Anthropic’s Claude Code runs code to test if it is safe – which might be a big mistake
Conflicting opinions on the ROI of AI
How to evaluate AI agent development tools and platforms
Beyond AI protocols: Preparing for MCP and A2A in production
UK toughens Online Safety Act with ban on self-harm content
Forget disappearing messages – now Signal will store 100MB of them for you for free
Perl programming language rises again – Tiobe
WhatsApp’s former security boss claims reporting infosec failings led to ousting
Groovy 5 expands Java and JDK support
The US government has no idea how many cybersecurity pros it employs
Drift massive attack traced back to loose Salesloft GitHub account
Dev snared in crypto phishing net, 18 npm packages compromised
Salt Typhoon used dozens of domains, going back five years. Did you visit one?
Google intros EmbeddingGemma for on-device AI
PACER buckles under MFA rollout as courts warn of support delays
CISA sounds alarm over TP-Link wireless routers under attack
What Are Container Escape Vulnerabilities?
UK tech minister booted out in weekend cabinet reshuffle
How to spin Python’s challenges into AI gold
13 reasons SQL has got to go

https://security-tracker.debian.org/tracker/DSA-5994-1

https://security-tracker.debian.org/tracker/DSA-5993-1

* bsc#1243314 Cross-References: * CVE-2025-4945

Under lock and key: Safeguarding business data with encryption

As the attack surface expands and the threat landscape grows more complex, it’s time to consider whether your data protection strategy is fit for purpose

* bsc#1230028 * bsc#1247207 Cross-References: * CVE-2024-58266

Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.

The crazy, true story behind the first AI-powered ransomware
Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python
Databricks adds Data Science Agent to automate analytics tasks
Rust Innovation Lab launched, sponsors first project
Critical, make-me-super-user SAP S/4HANA bug under active exploitation
GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes

ESET researchers have identified a new threat actor targeting Windows servers with a passive C++ backdoor and a malicious IIS module that manipulates Google search results

Germany charges hacker with Rosneft cyberattack in latest wake-up call for critical infrastructure
Parents warned that robot toys spied on children’s location without consent

An update that fixes one vulnerability is now available.

An update that fixes four vulnerabilities is now available.

An update that fixes four vulnerabilities is now available.

* bsc#1249011 Cross-References: * CVE-2025-58160

* bsc#1246623 * jsc#PED-13306 Cross-References: * CVE-2025-40918

PostgreSQL 18 to boost OLTP performance, but misses AI readiness
What makes JavaScript great
Is Meta’s $10 billion cloud deal a good idea for you?
Knock-on effects of software dev break-in hit schools trust
Swiss launch open source AI model as “ethical” alternative to big US LLMs
Attackers snooping around Sitecore, dropping malware via public sample keys
Boffins build automated Android bug hunting system
China-aligned crew poisons Windows servers to manipulate Google results
Gemini 2.5 Flash Image model advances AI image generation
JDK 26 to get HTTP/3 support

FFmpeg could be made to crash if it received specially crafted input.

A couple of vulnerabilities have been fixed in ClamAV, an anti-virus utility for Unix. CVE-2025-20128

* bsc#1246058 * bsc#1246059 Cross-References: * CVE-2025-32023

* bsc#1225905 Cross-References: * CVE-2024-35221

* bsc#1248810 Cross-References: * CVE-2025-57833

Enterprises sticking with Windows 10 could shell out billions for continued support
Security beyond the model: Introducing AI system cards
Learn about confidential clusters
Neo4j unveils Infinigraph to merge OLTP and OLAP for Agentic AI
Databot: AI-assisted data analysis in R or Python
Vibe coding with GitHub Spark
Sainsbury’s eyes up shoplifters with live facial recognition
France fines Google, SHEIN for undercooked cookie policies that led to crummy privacy
US puts $10M bounty on three Russians accused of attacking critical infrastructure
Congressional panel throws cyber threat intel-sharing, funding a lifeline
Smashing Security podcast #433: How hackers turned AI into their new henchman
Android drops mega patch bomb – 120 fixes, two already exploited
Zoneless Angular arrives in Angular 20.2
Crims claim HexStrike AI penetration tool makes quick work of Citrix bugs
It looks like you’re ransoming data. Would you like some help?
FBI warns seniors are being targeted in three-phase Phantom Hacker scams
The AI Fix #66: OpenAI and Anthropic test each other, and everyone fails the apocalypse test
Matrix.org homeserver grinds to a halt after RAID meltdown

* bsc#1246088 Affected Products: * HPC Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7

OpenAI acquires Statsig to speed up generative AI-based product launches
Native UI vs. web UI: How to choose
What is the JVM? Introducing the Java virtual machine
Seven little habits for writing better code