February 13, 2025
Sophos sheds 6% of staff after swallowing Secureworks
February 13, 2025
Go 1.24 arrives with generic type aliases, boosted WebAssembly support
February 13, 2025
Smashing Security podcast #404: Podcast not found
February 13, 2025
Trump’s cyber chief pick has little experience in The Cyber
February 12, 2025
Arizona laptop farmer pleads guilty for funneling $17M to Kim Jong Un
February 12, 2025
Crimelords and spies for rogue states are working together, says Google
February 12, 2025
February 12, 2025
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
February 12, 2025
February 12, 2025
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993
February 12, 2025
February 12, 2025
* bsc#1230998 * bsc#1231993 Cross-References: * CVE-2024-45016
February 12, 2025
Keep your code open to possibilities
February 12, 2025
Rust memory management explained
February 12, 2025
Dynamic web apps with HTMX, Python, and Django
February 12, 2025
February’s Patch Tuesday sees Microsoft offer just 63 fixes
February 12, 2025
Don’t use public ASP.NET keys (duh), Microsoft warns
February 12, 2025
https://security-tracker.debian.org/tracker/DSA-5864-1
February 12, 2025
https://security-tracker.debian.org/tracker/DSA-5865-1
February 12, 2025
Probe finds US Coast Guard has left maritime cybersecurity adrift
February 11, 2025
https://security-tracker.debian.org/tracker/DSA-5863-1
February 11, 2025
OpenText recently surveyed 255 MSPs to uncover key trends shaping the future of Managed Detection and Response (MDR). The findings reveal not only what cybersecurity professionals are prioritizing but also how MSPs can better meet the evolving demands of their small and midsize business (SMB) customers. One key takeaway from the survey: 81% of respondents […]
February 11, 2025
Man who SIM-swapped the SEC’s X account pleads guilty
February 11, 2025
February 11, 2025
* bsc#1228165 * bsc#1236705 Cross-References: * CVE-2025-0938
February 11, 2025
February 11, 2025
* bsc#1227056 * bsc#1236483 Cross-References: * CVE-2023-45288
February 11, 2025
February 11, 2025
* bsc#1218879 * bsc#1218880 * bsc#1218881 * bsc#1218882 * bsc#1218883
February 11, 2025
The cloud giants stumble
February 11, 2025
Review: Zencoder has a vision for AI coding
February 11, 2025
Why the generative AI hype is good
February 11, 2025
C++, Go, and Rust gaining popularity – Tiobe
February 11, 2025
Apple warns ‘extremely sophisticated attack’ may be targeting iThings
February 11, 2025
All your 8Base are belong to us: Ransomware crew busted in global sting
February 10, 2025
What you need to know about Python 3.14’s faster interpreter
February 10, 2025
Toll booth bandits continue to scam via SMS messages
February 10, 2025
February is a great month to refresh your cyber awareness skills. February 11 marks Safer Internet Day, encouraging us to work together to make the internet a safer and better place. It’s the perfect time to learn more about cybersecurity risks and best practices for protecting yourself and your loved ones online. And while February […]
February 10, 2025
Navigating AI-Driven Security Challenges in Linux Environments
February 10, 2025
February 10, 2025
* bsc#1236619 * jsc#PED-12018 Cross-References: * CVE-2025-24528
February 10, 2025
February 10, 2025
* bsc#1233760 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6
February 10, 2025
How Secure Is Linux? Examining Features That Ensure Safety
February 10, 2025
Secure Your DevTools: Critical UAF Vulnerability Warning
February 10, 2025
Firefox 135 Released: Key Updates & Advanced Browser Protection Features
February 10, 2025
Tails 6.12: An Essential Privacy, Security, and Reliability Upgrade
February 10, 2025
USN-7206-3 caused some regression in rsync.
February 10, 2025
When LLMs become influencers
February 10, 2025
Are database administrators doomed?
February 10, 2025
Will Kubernetes ever get easier?
February 10, 2025
* bsc#1236596 Cross-References: * CVE-2024-11187
February 10, 2025
https://security-tracker.debian.org/tracker/DSA-5862-1
February 10, 2025
https://security-tracker.debian.org/tracker/DSA-5861-1
February 9, 2025
Vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privilege escalation.
February 9, 2025
update to 1.33.0
February 9, 2025
Security fix for CVE-2023-52892, CVE-2024-27354
February 9, 2025
Add code to deal with sched_setattr() not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack
February 9, 2025
Update to 1.17.3 Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999 Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA- vcfp-63cx-4h59, and CVE-2024-0137 or GHSA-frhw-w3wm-6cw4
February 9, 2025
New ASPA support is now always compiled in and available if enable-aspa is set. The aspa Cargo feature has been removed. (#990) If merging mutliple ASPA objects for a single customer ASN results in more than 16,380 provider ASNs, the ASPA is dropped. (Note that ASPA objects with more
February 9, 2025
Updated to latest upstream (135.0)
February 8, 2025
Update to 0.8.4
February 8, 2025
xrdp allows an infinite number of login attempts. (CVE-2024-39917) References: – https://bugs.mageia.org/show_bug.cgi?id=33985 – https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/FMYGECEBC7XEBNQ2ZHXYRQBLCMHHXKP5/
February 8, 2025
When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time to complete. This could be utilized for a remote DoS attack by presenting a crafted certificate to the network peer.
February 8, 2025
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate.
February 8, 2025
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuilds of all packages that statically link the openssl crate.
February 8, 2025
https://security-tracker.debian.org/tracker/DSA-5860-1
February 8, 2025
UK Home Office silent on alleged Apple backdoor order
February 7, 2025
February 7, 2025
* bsc#1236270 Cross-References: * CVE-2024-11218
February 7, 2025
UK industry leaders unleash hurricane-grade scale for cyberattacks
February 7, 2025
Data breaches at UK law firms are on the rise, research reveals
February 7, 2025
A vulnerability has been discovered in the OpenJDK Java runtime, which may result in authorisation bypass or information disclosure. For Debian 11 bullseye, this problem has been fixed in version
February 7, 2025
The hidden threat of neglected cloud infrastructure
February 7, 2025
Full-stack JavaScript leads the way
February 7, 2025
Updated to latest upstream (135.0)
February 7, 2025
Fix CVE-2025-0781
February 7, 2025
Fix CVE-2025-0781
February 7, 2025
GitHub Copilot previews agent mode
February 7, 2025