-
xAI’s Grok CLI uploaded users’ entire home directories – SSH keys, password managers, all of it
The big story today is xAI’s Grok CLI uploading entire home directories to Google Cloud – SSH keys, password databases, everything. That’ll wake you up.
-
CISA contractor leaked AWS GovCloud keys to public GitHub for six months
Patch Tuesday broke records again, a CISA contractor left AWS GovCloud keys public for six months, and lobste.rs quietly ditched MariaDB for SQLite.
-
CISA’s AWS GovCloud Keys Sat Public on GitHub for Six Months
CISA credentials sat in a public GitHub repo for six months. Netflix mapped 10k+ services in real time. Debian bookworm moves to LTS. A busy day for postmortems.
-
29-year-old Squid proxy bug “Squidbleed” leaks HTTP requests
Debian 12 exits regular support, Bun moves to Rust, and a 29-year-old Squid bug finally gets a name.
-
29-Year-Old Squid Proxy Bug ‘Squidbleed’ Leaks HTTP Requests
Debian ships two point releases in one day, LLVM lands x86 sandboxing, and the Bun-to-Rust rewrite is the most honest migration post in a while.
-
Why we cannot wait for better post-quantum signature algorithms – ML-DSA now
Heavy AI news day — GPT-5.6, Grok 4.5, Muse Spark all landed within 24h. We picked the items that actually help you operate things.
-
GhostApproval: AI coding assistants approve malicious actions without showing users what they approved
etcd 3.7 lands with streaming ranges, Cloudflare bets on global consensus, and a disgruntled OpenMandriva contributor reminded everyone why least-privilege still matters.
-
XWayland 24.1.13 fixes two more X.Org security issues
Kernel 7.2-rc2 is out, trusted publishing is getting pushback, and sqlite-utils finally hit 4.0 – solid engineering day.
-
France sets a PQC deadline; AMD ships its own Linux distro
France draws a hard line on post-quantum by 2027, AMD ships its own Linux distro for the AI dev platform nobody saw coming, and OpenSSH 10.4 now fails loud if your kernel is missing SECCOMP — quieter weeks exist.
-
Four vulnerabilities in Guix: remote privilege escalation via substitute download
Seven stable kernels out, Guix has remote privilege escalation, and Claude Opus 4.8 is inventing tool-call fields. Odd weekend.
-
Subscribe
Subscribed
Already have a WordPress.com account? Log in now.
Linkzine 