Menu

Category Archives: All

Everything

Internet mapping and research outfit Censys reveals state-based abuse, harassment

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Senior developers let AI do more of the coding — survey
How big will this Drift get? Cloudflare cops to Salesloft Drift breach
Who watches the watchmen? Surveillanceware firms make bank, avoid oversight

Two vulnerabilities have been fixed in the audio data read/write library libsndfile.

Zscaler latest victim of Salesloft Drift attacks, customer data exposed
Google to add developer verification requirement for Android apps
Stolen OAuth tokens expose Palo Alto customer data

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

* jsc#PED-11136 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6

Exploring Open Source Intelligence (OSINT) Techniques And Tools For Cybersecurity Applications
Huawei counts cost of Western bans as UK business withers
Frostbyte10 bugs put thousands of refrigerators at major grocery chains at risk
How to build a production-grade agentic AI platform – lessons from Gravity
Overseas enterprises and US sovereign clouds
Reg readers have spoken: 93% back move away from Microsoft in UK public sector
Europe Putin the blame on Russia after GPS jamming disrupts president’s plane
In the rush to adopt hot new tech, security is often forgotten. AI is no exception

Several security issues were fixed in ImageMagick.

Microsoft signals shift from OpenAI with launch of first in-house AI models for Copilot
Norway’s £10B UK frigate deal could delay Royal Navy ships
DDoS is the neglected cybercrime that’s getting bigger. Let’s kill it off
Spotlight report: IT careers in the AI era
LegalPwn: Tricking LLMs by burying badness in lawyerly fine print

DoS with large SAML responses has been fixed in ruby-saml, a library implementing the client side of SAML authorization for the Ruby interpreter.

Why DocumentDB can be a win for MongoDB

* bsc#1244270 * bsc#1244272 Cross-References: * CVE-2025-5914

Hacker suspected of trying to cheat his way into university is arrested in Spain
Traffic to government domains often crosses national borders, or flows through risky bottlenecks
A guide to the multicloud strategies of AWS, Azure, and Google Cloud
WhatsApp warns of ‘attack against specific targeted users’

Update to release v0.27.0 Resolves: rhvz#2388453, rhbz#2384137, rhbz#2384154 Upstream new features and fixes

Exiv2 0.28.6 + patch to fix silent abi breakage Exiv2 v0.28.6 (Fixes two low severity CVEs)

Update to 139.0.7258.154 CVE-2025-9478: Use after free in ANGLE

Several security issues were fixed in Open VM Tools.

Update to 139.0.7258.154 CVE-2025-9478: Use after free in ANGLE

CVE-2025-8067 Out-Of-Bounds Read in UDisks Daemon

CVE-2025-8010: Type Confusion in V8 CVE-2025-8011: Type Confusion in V8 CVE-2025-8576: Use after free in Extensions CVE-2025-8578: Use after free in Cast CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome

Update to release v0.27.0 Resolves: rhvz#2388453, rhbz#2384137, rhbz#2384154 Upstream new features and fixes

Remove prebuild libffts.a library

New udisks2 packages are available for Slackware 15.0 and -current to fix a security issue.

Red Hat Trusted Artifact Signer can now be hosted on RHEL

Update to latest upstream (142.0.1) Updated to new upstream release (142.0)

https://security-tracker.debian.org/tracker/DSA-5992-1

Researcher who found McDonald’s free-food hack turns her attention to Chinese restaurant robots

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

* bsc#1240414 Cross-References: * CVE-2025-31115

* bsc#1238078 * bsc#1243450 * bsc#1244116 Cross-References:

* bsc#1220262 Cross-References: * CVE-2023-50782

* bsc#1244270 * bsc#1244272 * bsc#1244273 * bsc#1244279 * bsc#1244336

Microsoft’s signals shift from OpenAI with launch of first in-house AI models for Copilot
AWS catches Russia’s Cozy Bear clawing at Microsoft credentials
Sweden scrambles after ransomware attack puts sensitive worker data at risk
This month in security with Tony Anscombe – August 2025 edition

From Meta shutting down millions of WhatsApp accounts linked to scam centers all the way to attacks at water facilities in Europe, August 2025 saw no shortage of impactful cybersecurity news

Enterprise password management outfit Passwordstate patches Emergency Access bug

* bsc#1248502 Cross-References: * CVE-2025-8067

* bsc#1248502 Cross-References: * CVE-2025-8067

* bsc#1248502 Cross-References: * CVE-2025-8067

* bsc#1248119 * bsc#1248120 * bsc#1248122 Cross-References:

OpenAI adds MCP and SIP support to gpt-realtime for smarter voice-based agents
UK government dragged for incomplete security reforms after Afghan leak fallout
Three tips for building agentic AI systems on cloud platforms
New tools make Python app distribution easier than ever
Evolving Kubernetes for generative AI inference
The era of cheap AI coding assistants may be over

https://security-tracker.debian.org/tracker/DSA-5990-1

https://security-tracker.debian.org/tracker/DSA-5991-1

FBI cyber cop: Salt Typhoon pwned ‘nearly every American’
JetBrains updates Kotlin-based AI agent development framework

https://security-tracker.debian.org/tracker/DSA-5988-1

https://security-tracker.debian.org/tracker/DSA-5987-1

DHS says it needs $100M worth of counter-drone tech to protect America
Not in my browser! Vivaldi capo doubles down on generative AI ban
Gemini CLI integrates with Zed for AI-powered coding
FBI, Dutch cops seize fake ID marketplace that sold identity docs for $9
How does China keep stealing our stuff, wonders DoD group responsible for keeping foreign agents out
Don’t let “back to school” become “back to (cyber)bullying”

Cyberbullying is a fact of life in our digital-centric society, but there are ways to push back

First known AI-powered ransomware uncovered by ESET Research

The discovery of PromptLock shows how malicious use of AI models could supercharge ransomware and other threats

Wave of npm supply chain attacks exposes thousands of enterprise developer credentials
16 billion credentials exposed: why your business needs a password manager now
SK Telecom walloped with $97M fine after schoolkid security blunders let attackers run riot
TransUnion admits 4.5M affected after third-party support app breached
Thousands of Citrix NetScaler boxes still sitting ducks despite patches
Ransomware crooks knock Swedish municipalities offline for measly sum of $168K
Euro banks block billions in rogue PayPal direct debits after fraud glitch
Law firm email blunder exposes Church of England abuse victim details
8 vendors bringing AI to devsecops and application security
From Teradata to lakehouse: Lessons from a real-world data platform modernization
Using Cosmos DB in Microsoft Fabric

* bsc#1246472 Cross-References: * CVE-2025-7519

* bsc#1244270 * bsc#1244272 * bsc#1244273 * bsc#1244279 * bsc#1244336