Menu

Category Archives: Security

Articles about security

* bsc#1237208 * bsc#1247528 * bsc#1247529 * bsc#1247530 * bsc#1247531

UK telco Colt’s recovery from August cyberattack pushes into November
What Is a Checksum? Meaning, Examples & Why You Should Use Them
Software developers aren’t buying it
The rise of AI-ready private clouds
Is AI the 4GL we’ve been waiting for?
Rust tutorial: Get started with the Rust language
UEFI Secure Boot for Linux Arm64 – where do we stand?
Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack
Australia to let Big Tech choose its own adventure to enact kids social media ban
Visual Studio 2026 doubles down on AI-assisted coding
Microsoft blocks bait for ‘fastest-growing’ 365 phish kit, seizes 338 domains
Criminals broke into the system Google uses to share info with cops
Apple 0-day likely used in spy attacks affected devices as old as iPhone 8
Self-propagating worm fuels latest npm supply chain compromise
Luxury fashion brands Gucci, Balenciaga and Alexander McQueen hacked – customer data stolen
The AI Fix #68: AI telepathy, and rights for robots
‘FileFix’ attacks use fake Facebook security alerts to trick victims into running infostealers
Preparing your organization for the quantum future
JLR stuck in neutral as losses skyrocket amid cyberattack cleanup
China slaps 1-hour deadline on reporting serious cyber incidents

This update upgrade the package to version 0.44. This version fixes CVE-2025-40924 by using Crypt::SysRandom to generate properly random session IDs.

This update upgrade the package to version 0.36. This version fixes CVE-2025-40923 by using Crypt::SysRandom to generate secure session IDs.

This update upgrade the package to version 1.019. This version fixes CVE-2025-40920 by using Crypt::SysRandom to generate nonces instead of Data::UUID.

Update to 140.0.7339.127 CVE-2025-10200: Use after free in Serviceworker CVE-2025-10201: Inappropriate implementation in Mojo

2.4.14 (fixes CVE-2025-58060 and CVE-2025-58364)

Fix crash with spice GL (bz 2391334) Update to 10.1.0 GA release Automatic update for qemu-10.1.0-0.4.rc4.fc43.

https://security-tracker.debian.org/tracker/DSA-6002-1

Careless engineer stored recovery codes in plaintext, got whole org pwned
Security begins with visibility: How IGA brings hidden access risks to light
Former FinWise employee may have accessed nearly 700K customer records
Nork snoops whip up fake South Korean military ID with help from ChatGPT
China turns the screws on Nvidia with antitrust probe
The EU Cyber Resilience Act’s impact on open source security
Jaguar Land Rover supply chain workers must get Covid-style support, says union
2-agent architecture: Separating context from execution in AI systems
More hardware won’t fix bad engineering
Down and out with Cerebras Code
AI developer certifications tech companies want
UK Lords take aim at Ofcom’s ‘child-protection’ upgrades to Online Safety Act
Cyber-scam camp operators shift operations to vulnerable countries as sanctions strike
15 ransomware gangs ‘go dark’ to enjoy ‘golden parachutes’
Data destruction done wrong could cost your company millions

https://security-tracker.debian.org/tracker/DSA-6001-1

Databricks at a crossroads: Can its AI strategy prevail without Naveen Rao?
Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass

UEFI copycat of Petya/NotPetya exploiting CVE-2024-7344 discovered on VirusTotal

HybridPetya: More proof that Secure Boot bypasses are not just an urban legend

https://security-tracker.debian.org/tracker/DSA-6000-1

https://security-tracker.debian.org/tracker/DSA-5999-1

Samsung fixes Android 0-day that may have been used to spy on WhatsApp messages
Kotlin 2.2.20 boosts WebAssembly support
Are cybercriminals hacking your systems – or just logging in?

As bad actors often simply waltz through companies’ digital front doors with a key, here’s how to keep your own door firmly locked tight

All your vulns are belong to us! CISA wants to maintain gov control of CVE program
British rail passengers urged to stay on guard after hack signals failure
1,200 undergrads hung out to dry after jailbreak attack on laundry machines
Navigating AI risk: Building a trusted foundation with Red Hat
Privacy activists warn digital ID won’t stop small boats – but will enable mass surveillance
Hack to school: Parents told to keep their little script kiddies in line
Making good choices: How to get the best from Python tools
The hidden threat to AI performance
When it comes to AI, bigger isn’t always better
Huntress’s ‘hilarious’ attacker surveillance splits infosec community
VS Code 1.104 emphasizes AI model selection, agent security
We’re number 1! America now leads the world in surveillanceware investment

https://security-tracker.debian.org/tracker/DSA-5997-1

https://security-tracker.debian.org/tracker/DSA-5996-1

Hijacker helper VoidProxy boosts Google, Microsoft accounts on demand
AI-powered penetration tool, an attacker’s dream, downloaded 10K times in 2 months
Anti-DDoS outfit walloped by record packet flood
Spectre haunts CPUs again: VMSCAPE vulnerability leaks cloud secrets
Senator blasts Microsoft for ‘dangerous, insecure software’ that helped pwn US hospitals
Brussels faces privacy crossroads over encryption backdoors
Attacker steals customer data from Brit rail operator LNER during break-in at supplier
Experts scrutinized Ofcom’s Online Safety Act governance. They’re concerned
Unlocking LLM superpowers: How PagedAttention helps the memory maze
How LinkedIn built an agentic AI platform
How to implement caching in ASP.NET Core minimal APIs
BAE Systems surfaces autonomous submarine for military use
NASA bars Chinese citizens from its facilities, networks, even Zoom calls
Beijing went to ‘EggStreme’ lengths to attack Philippines military, researchers say

https://security-tracker.debian.org/tracker/DSA-5998-1

Smashing Security podcast #434: Whopper Hackers, and AI Whoppers
Akira ransomware crims abusing trifecta of SonicWall security holes for extortion attacks
US charges suspected ransomware kingpin, and offers $10 million bounty for his capture
JFrog announces ‘agentic repo’ for AI-driven development
Apple slips up on ChillyHell macOS malware, lets it past security . . . for 4 years
Preventing business disruption and building cyber-resilience with MDR

Given the serious financial and reputational risks of incidents that grind business to a halt, organizations need to prioritize a prevention-first cybersecurity strategy

Jaguar Land Rover U-turns to confirm ‘some data’ affected after cyber prang
.NET 10 moves to release candidate stage
Uncle Sam indicts alleged ransomware kingpin tied to $18B in damages
Flu jab email mishap exposes hundreds of students’ personal data
Six hard truths for software development bosses
9 vital concepts of modern JavaScript
Organize Rust projects for faster compilation with Cargo workspaces
Lovesac warns customers their data was breached after suspected RansomHub attack six months ago
Cybercrooks ripped the wheels off at Jaguar Land Rover. Here’s how not to get taken for a ride
This Patch Tuesday, SAP is the worst offender and Microsoft users can kinda chill

https://security-tracker.debian.org/tracker/DSA-5995-1

JDK 26: The new features in Java 26
More packages poisoned in npm attack, but would-be crypto thieves left pocket change