-

CISA contractor leaked AWS GovCloud keys to public GitHub for six months
Patch Tuesday broke records again, a CISA contractor left AWS GovCloud keys public for six months, and lobste.rs quietly ditched MariaDB for SQLite.
-

CISA’s AWS GovCloud Keys Sat Public on GitHub for Six Months
CISA credentials sat in a public GitHub repo for six months. Netflix mapped 10k+ services in real time. Debian bookworm moves to LTS. A busy day for postmortems.
-

XWayland 24.1.13 fixes two more X.Org security issues
Kernel 7.2-rc2 is out, trusted publishing is getting pushback, and sqlite-utils finally hit 4.0 – solid engineering day.
-

Secure Boot certificate expiration: what actually breaks and when
Secure Boot certs expiring, etcd patching websocket auth, EKS gets rollback, and Linux 7.3 targets NVMe bottlenecks — solid infrastructure week.