Menu

Latest articles

Fake CAPTCHA tests trick users into running malware
Europol says Telegram post about 50,000 Qilin ransomware award is fake
Interpol bags 1,209 suspects, $97M in cybercrime operation focused on Africa

* bsc#1248006 Cross-References: * CVE-2025-55159

Several security issues were fixed in PHP.

Generative AI dos, don’ts, and ‘undos’
From cloud migration to cloud optimization

* bsc#1248006 Cross-References: * CVE-2025-55159

Anthropic adds Claude Code to its Claude enterprise plans

Several security issues were fixed in Python.

Update to version 0.4.11. This version includes a fix for CVE-2025-55159, but there are zero packages in Fedora or EPEL that use the affected API, so no rebuilds are necessary.

Update to v1.136.0 Update to 1.135.2 Update to 1.135.0

Developer jailed for taking down employer’s network with kill switch malware

https://security-tracker.debian.org/tracker/DSA-5983-1

Anthropic scanning Claude chats for queries about DIY nukes for some reason
Microsoft reportedly cuts China’s early access to bug disclosures, PoC exploit code
‘Impersonation as a service’ the next big thing in cybercrime
Honey, I shrunk the image and now I’m pwned
Congressman proposes bringing back letters of marque for cyber privateers
Orange Belgium mega-breach exposes 850K customers to serious fraud
US cops wrap up RapperBot, one of world’s biggest DDoS-for-hire rackets
Apple rushes out fix for active zero-day in iOS and macOS
Colt changes tune, admits data theft as Warlock gang begins auction
Google yet to take down ‘screenshot-grabbing’ Chrome VPN extension

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape or bypass of the same-origin policy.

AI crawlers and fetchers are blowing up websites, with Meta and OpenAI the worst offenders

poppler could be made to denial of service if it received a specially crafted PDF file.

How to upload files using minimal APIs in ASP.NET Core
The shift from AI code generation to true development partnership
Up and running with Azure Linux 3.0

* bsc#1245218 * bsc#1247350 * bsc#1247351 Cross-References:

* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351

GitHub launches Copilot agents panel on GitHub.com
China cut itself off from the global internet for an hour on Wednesday

https://security-tracker.debian.org/tracker/DSA-5982-1

https://security-tracker.debian.org/tracker/DSA-5981-1

Microsoft stays mum about M365 Copilot on-demand security bypass
Smashing Security podcast #431: How to mine millions without paying the bill
Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE
JRebel Enterprise speeds configuration, code updates for cloud-based Java development
FBI: Russian spies exploiting a 7-year-old Cisco bug to slurp configs from critical infrastructure
Commvault releases patches for two nasty bug chains after exploits proven
‘Limited’ data leak at Aussie telco turns out to be 280K customer details
Warlock ransomware: What you need to know
The AI Fix #64: AI can be vaccinated against evil, and the “Rumble in the Silicon Jungle”

* bsc#1244270 * bsc#1244272 * bsc#1244273 * bsc#1244279 * bsc#1244336

* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351

Several security issues were fixed in Apache HTTP Server.

AWS blames bug for Kiro pricing glitch that drained developer limits

Several security issues were fixed in libxml2.

PyApp: An easy way to package Python apps as executables
Is the generative AI bubble about to burst?
Your code is more strongly coupled than you think

* bsc#1012628 * bsc#1139073 * bsc#1204142 * bsc#1210025 * bsc#1211226

McDonald’s not lovin’ it when hacker exposes nuggets of rotten security

https://security-tracker.debian.org/tracker/DSA-5980-1

.NET 10 Preview 7 adds XAML generator
Don’t want drive-by Ollama attackers snooping on your local chats? Patch now
Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in
Investors beware: AI-powered financial scams swamp social media

Can you tell the difference between legitimate marketing and deepfake scam ads? It’s not always as easy as you may think.

Speed cameras knocked out after cyber attack
Casino tech outfit Bragg cops to intrusion but says data jackpot untouched

* bsc#1242666 * bsc#1243428 Cross-References: * CVE-2025-3416

* bsc#1244631 * bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351

* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351

US spy chief claims UK backed down over Apple backdoor demand
The successes and challenges of AI agents
Retrieval-augmented generation with Nvidia NeMo Retriever
IBM can’t afford an unreliable cloud
More customers asking for Google’s Data Boundary, says Cloud Experience boss
Browser wars are back, predicts Palo Alto, thanks to AI

https://security-tracker.debian.org/tracker/DSA-5979-1

Go language previews performance-boosting garbage collector
Facial recognition works better in the lab than on the street, researchers show
Pot calls kettle black as China dubs US ‘surveillance empire’ over chip tracking
Microsoft’s Nuance coughs up $8.5M to rid itself of MOVEit breach suit
Workday warns of CRM breach after social engineers make off with business contact details
What Is A Virtual Private Network (VPN)?

* bsc#1236217 * bsc#1246118 * bsc#1247719 * bsc#1247720 * jsc#SLE-18320

Google adds VM monitoring to Database Center amid enterprise demand
Introducing Red Hat Technical Account Management Service for Product Security
Boffins say tool can sniff 5G traffic, launch ‘attacks’ without using rogue base stations
Every question you ask, every comment you make, I’ll be recording you
How does the metrics layer enhance the power of advanced analytics?
Why software developers burn out, and how to fix it
Why AI fails at business context, and what to do about it

* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351

* bsc#1244631 * bsc#1245218 * bsc#1245350 * bsc#1245989 * bsc#1247350

* bsc#1244337 * bsc#1247350 * bsc#1247351 Cross-References:

* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351

* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351

Someone’s poking the bear with infostealers targeting Russian crypto developers

https://security-tracker.debian.org/tracker/DSA-5978-1

P2P payment service Zelle sued for enabling payment fraud hell