-

CISA’s AWS GovCloud Keys Sat Public on GitHub for Six Months
CISA credentials sat in a public GitHub repo for six months. Netflix mapped 10k+ services in real time. Debian bookworm moves to LTS. A busy day for postmortems.
-

29-year-old Squid proxy bug “Squidbleed” leaks HTTP requests
Debian 12 exits regular support, Bun moves to Rust, and a 29-year-old Squid bug finally gets a name.
-

29-Year-Old Squid Proxy Bug ‘Squidbleed’ Leaks HTTP Requests
Debian ships two point releases in one day, LLVM lands x86 sandboxing, and the Bun-to-Rust rewrite is the most honest migration post in a while.
-

Why we cannot wait for better post-quantum signature algorithms – ML-DSA now
Heavy AI news day — GPT-5.6, Grok 4.5, Muse Spark all landed within 24h. We picked the items that actually help you operate things.
-

XWayland 24.1.13 fixes two more X.Org security issues
Kernel 7.2-rc2 is out, trusted publishing is getting pushback, and sqlite-utils finally hit 4.0 – solid engineering day.
-

France sets a PQC deadline; AMD ships its own Linux distro
France draws a hard line on post-quantum by 2027, AMD ships its own Linux distro for the AI dev platform nobody saw coming, and OpenSSH 10.4 now fails loud if your kernel is missing SECCOMP — quieter weeks exist.
-

FBI seizes NetNut proxy platform tied to 2M-device Popa botnet
Quiet holiday week, but the kernel mailing list and the FBI both had eventful Wednesdays.
-

Secure Boot certificate expiration: what actually breaks and when
Secure Boot certs expiring, etcd patching websocket auth, EKS gets rollback, and Linux 7.3 targets NVMe bottlenecks — solid infrastructure week.
-

Linux 7.2 targets August; an 18-year-old GPU bug surfaces; PQC lands in pip
An 18-year-old bug surfaces via GPU fleet telemetry, AI tooling is making engineers work more hours not fewer, and post-quantum crypto just became a single pip install — all in the same news cycle.
-

Weak RSA keys with sparse bit patterns found in real-world Certificate Transparency logs
Git 2.55, Linux 7.2-rc1, and a real RSA key vulnerability in the wild — a quieter news day with a few sharp edges worth your attention.