Aggregated from vendor advisories, security research, and industry publications.
In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also surpassed 3,000 unique container images and 675,000 image versions in our catalog. Those are the headline numbers, but I want to share what's actually behind them. The number itself is less interesting than the system that produced it, and why we had to fundamentally
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says. Free…
Proprietary platform keeps incumbent in place while NESO prepares a future competition
Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices. The post MikroTik Patches Critical Flaws Chained to Hack…
Hackers stole the information of students, teachers, staff, and parents/guardians from a self-hosted Metabase instance. The post Mathspace Data Breach Exposes Over 1 Million People…
Administrators are advised to check their deployments for newly created user accounts they don’t recognize. The post N-able Patches Critical Zero-Day in N-central appeared first on…
Dating app admits no liability over allegations that it shared sensitive user data, including HIV status, with third parties
Interesting research: “Stealing Reasoning Traces from Proprietary LLM APIs“: Abstract: Leading large language model providers now conceal their models’ step-by-step reasoning, or c…
Ministers declare war on an 'industry of dither and delay' as consultations, legal caution, and judicial reviews get the chop
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. …
Cross-government plan combines civil ambitions with an increasingly military view of orbit
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams…
New CPU and GPU designs chase lower latency and richer games within a 1 W power budget
PARTNER CONTENT: Pairs block and adjacent file workloads with independent scaling of performance and capacity
Exclusive: An exposed Advance Passenger Information System (APIS) database held 220 million passenger and crew records containing names, passport numbers, dates of birth, nationali…
Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users' personal information, including their H…
Introduces 'digital duty of care' that will mean Aussies get ‘my feed, my way’ – without algorithms if requested
Resistance is futile
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. "…
A zero-day vulnerability dubbed "StyleSmuggler" affecting all versions of Magento and Adobe Commerce is being exploited in attacks to deploy a backdoor. [...]
MPs welcome move but still want answers over how the conflict of interest was allowed to arise
Wheels turning on the road and in government
Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (SaaS) offerings throug…
A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials. […
PC buyers already had enough of helping to fund the AI revolution, only essential refreshes happening now
Nothing says ‘For internal use only’ quite like emailing it to the press
Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It still appears, even with images blocked…
Commission reportedly seeks third-party views, although no formal investigation is underway
Self-described white hats promise to return 'most' of the 4,000 BTC once the vulnerability is fixed
Online maths learning platform Mathspace disclosed over the weekend that attackers stole data from more than 1 million students, staff, and parents after breaching its Metabase int…