Menu

Category Archives: All

Everything

Smashing Security podcast #425: Call of Duty: From pew-pew to pwned
How to trick ChatGPT into revealing Windows keys? I give up
US sanctions alleged North Korean IT sweatshop leader
AMD warns of new Meltdown, Spectre-like bugs affecting CPUs
As Texas floods, so does the internet – with dangerous lies
Breaking Down BERT Ransomware: Lessons for Linux & ESXi Defenders

The following updated rpms for have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Oracle Database@AWS goes GA: Exadata and Autonomous DB now live in the US
Artificial intelligence is a commodity, but understanding is a superpower
Get started with Google Agent Development Kit
The ultimate software engineering abstraction
Clarifai AI Runners connect local models to cloud

https://security-tracker.debian.org/tracker/DSA-5960-1

ECMAScript 2025 JavaScript standard approved

Several security issues were fixed in libssh.

InfoWorld Technology of the Year Awards 2025 nominations now open
The cloud-native imperative for effective cyber resilience
The AI Fix #58: An AI runs a shop into the ground, and AI’s obsession with the number 27
SUSE launching region-locked support for the sovereignty-conscious
Metadata: Your ticket to the AI party
Exploring Parrot OS 6.4: A Vital Release for Security-Centric Workflows
Suspected Chinese cybersnoop grounded in Italy after US tipoff
Microsoft brings OpenAI-powered Deep Research to Azure AI Foundry agents

USN-7010-1 introduced a regression in DCMTK

How Deutsche Telekom designed AI agents for scale
What you absolutely cannot vibe code right now
Nvidia doubles down on GPUs as a service

Sekou Diakite from HPE discovered a mistake with permission handling for Coordinators within the accounting system of Slurm Workload Manager, a cluster resource management and job scheduling system, that it could allow a Coordinator to promote a user to Administrator.

* bsc#1227270 * bsc#1227271 * bsc#1227353 * bsc#1228097 * bsc#1233165

Is your password ecosystem ready for the regulators?
Suspected Scattered Spider domains target everyone from manufacturers to Chipotle

Several security issues were fixed in jQuery.

https://security-tracker.debian.org/tracker/DSA-5961-1

Deno 2.4 restores JavaScript bundling subcommand
CitrixBleed 2 exploits are on the loose as security researchers yell and wave their hands

Antonio Morales discovered an out-of-bounds write in the MMRDecoder::scanruns method in djvulibre, a library and set of tools to handle documents in the DjVu format, which may result in the execution of arbitrary code if a specially crafted document is processed.

Employee arrested after Brazil’s central bank service provider hacked for US $140 million
Phishing platforms, infostealers blamed as identity attacks soar
Arriving at ‘Hello World’ in enterprise AI
OutSystems Mentor: An AI-powered digital assistant for the entire SDLC
Advanced unit testing with JUnit 5, Mockito, and Hamcrest

* bsc#1243061 * bsc#1243804 * bsc#1243913 Cross-References:

5.2.0 release

Integer overflow on 32-bit systems has been fixed in the XMedCon toolkit for medical image conversion. For Debian 11 bullseye, this problem has been fixed in version

Stalkerware firm gets scooped by SQL-slinging security snoop

Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bookworm), these problems have been fixed in

Ingram Micro confirms ransomware behind multi-day outage

Update to 3.6.4 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4

https://security-tracker.debian.org/tracker/DSA-5959-1

PGSQL: Fixed GHSA-hrwm-9436-5mv3 (pgsql extension does not check for errors during escaping). (CVE-2025-1735) SOAP: Fixed GHSA-453j-q27h-5p8x (NULL Pointer Dereference in PHP SOAP

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in the xls2csv utility version 0.95. (CVE-2024-48877) An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. (CVE-2024-52035)

* bsc#1243314 * bsc#1243332 * bsc#1243422 * bsc#1243423

* bsc#1236931 * bsc#1239119 Cross-References: * CVE-2025-30258

How to get into cybersecurity | Unlocked 403 cybersecurity podcast (S2E3)

Cracking the code of a successful cybersecurity career starts here. Hear from ESET’s Robert Lipovsky as he reveals how to break into and thrive in this fast-paced field.

Task scams: Why you should never pay to get paid

Some schemes might sound unbelievable, but they’re easier to fall for than you think. Here’s how to avoid getting played by gamified job scams.

Massive spike in use of .es domains for phishing abuse

Update bundled pbkdf2 library.

* bsc#1245309 * bsc#1245310 * bsc#1245311 * bsc#1245314

* bsc#1238063 * bsc#1244136 Cross-References: * CVE-2025-0620

How government cyber cuts will affect you and your business

Deep cuts in cybersecurity spending risk creating ripple effects that will put many organizations at a higher risk of falling victim to cyberattacks

Technical difficulties or cyber attack? Ingram Micro’s website goes down just in time for the holiday weekend
Catwatchful stalkerware app spills secrets of 62,000 users – including its own admin

* bsc#1244704 Cross-References: * CVE-2025-6196

Hunters International ransomware group shuts down – but will it regroup under a new guise?
Risk management in the public cloud is your job
Developing JavaScript apps with AI agents

Multiple vulnerabilities are discovered in jpeg-xl, the JPEG XL (“JXL”) image coding library, including out of bounds read/write and stack based buffer overflow, which may cause excessive memory usage and denial of service attacks.

Backport fix for CVE-2025-6199.

5.2.0 release

https://security-tracker.debian.org/tracker/DSA-5958-1

Gamaredon in 2024: Cranking out spearphishing campaigns against Ukraine with an evolved toolset

ESET Research analyzes Gamaredon’s updated cyberespionage toolset, new stealth-focused techniques, and aggressive spearphishing operations observed throughout 2024

Microsoft Windows Firewall complains about Microsoft code
Young Consulting finds even more folks affected in breach mess – now over 1 million
Meta calls €200M EU fine over pay-or-consent ad model ‘unlawful’
SSH Under Siege: Hardening Your Linux Server Against Proxy Abuse
AWS adds incremental and distributed training to Clean Rooms for scalable ML collaboration
Ransomware crew Hunters International shuts down, hands out keys to victims
Model Context Protocol (MCP): Understanding security risks and controls
6 techniques to reduce cloud observability cost
Working with Microsoft 365’s new Copilot APIs
AiSuite: An open-source AI gateway for unified LLM access
What you need to know about Java wrapper classes
Let’s Encrypt rolls out free security certs for IP addresses

The embedded copy of pjproject is affected by a buffer overflow vulnerability, which affects applications that use PJSIP DNS resolver. For the stable distribution (bookworm), this problem has been fixed in

ChatGPT creates phisher’s paradise by recommending the wrong URLs for major companies

Several security issues were fixed in pcs.

Several security issues were fixed in Flask-CORS.