Do Son Let’s Encrypt is now testing IP-only digital certificates, offering a free alternative for securing IP addresses without domains, valid for six days with automated renewal.
open-source
Google Cloud launches Gemini CLI, a free, open-source terminal tool bringing Gemini 2.5 Pro to developers for code generation, debugging, and file manipulation.
Mozilla has updated its Add-ons store policies (effective Aug 4, 2025), lifting the ban on closed-group extensions, clarifying data consent, and simplifying privacy policy hosting.
Two severe Gogs flaws: CVE-2024-56731 (CVSS 10.0) allows RCE via symlink exploit, and CVE-2025-47943 (CVSS 6.3) is a stored XSS in PDF.js.
Google has donated its A2A (Agent2Agent) protocol for AI agents to the Linux Foundation, fostering open development and seamless interoperability across diverse AI systems.
Critical CVSS 9.9 RCE, IDOR, and path traversal flaws in InnoShop with full PoC exploit. No patch available—eCommerce sites at serious risk.
A critical cryptographic flaw in Meshtastic (CVE-2025-52464) allows message decryption and node hijacking due to duplicated/low-entropy keys.
A critical flaw (CVE-2025-4981, CVSS 9.9) in Mattermost allows authenticated users to achieve RCE via path traversal during archive uploads. Update immediately!
A critical RCE flaw (CVE-2025-49132, CVSS 10.0) in Pterodactyl game server panel allows unauthenticated arbitrary code execution. Malicious actors are already exploiting it.
Water Curse is using GitHub to distribute malicious open-source projects, weaponizing 76 accounts with multi-stage malware targeting developers, red teamers, and gamers.
A critical RCE flaw (CVE-2025-3248) in Langflow is being actively exploited to deploy the stealthy Flodrix botnet for reconnaissance and diverse DDoS attacks on AI app servers.
LibreOffice 25.8 Beta 2 officially ends support for Windows 7, 8, 8.1, and all 32-bit operating systems, focusing development on 64-bit platforms.
A critical Konsole vulnerability allows arbitrary code execution via a telnet:// URL scheme. Linux users must update to 25.04.2 immediately.
Microsoft's "Edit" command-line text editor is set to be pre-installed in Windows 11, offering simple text file manipulation.
A new DoS vulnerability (CVE-2025-48866) found in ModSecurity WAF can crash your web application. Update to 2.9.10 immediately!
Red Hat's new llm-d project, with industry leaders, aims to revolutionize large-scale generative AI inference for enterprises using Kubernetes and vLLM.
A sophisticated PyPI supply chain attack, "cappership," steals Solana private keys by monkey-patching, leveraging transitive dependencies and blockchain exfiltration.
A study reveals widespread path traversal (CWE-22) in open-source projects, exacerbated by LLMs generating insecure code. Automated detection and patching are critical.
A SQL injection vulnerability (CVE-2025-48912) in Apache Superset allows authenticated attackers to bypass row-level security, exposing sensitive data.
Ubuntu now offers monthly development snapshots for early access to new features. Test upcoming versions before beta, RC, and stable releases!
AlmaLinux OS 10 "Purple Lion" is out, offering RHEL 10 compatibility, extended x86_64-v2 support, and new features like SPICE protocol.
Microsoft's Aurora AI, an open-source model, achieves breakthrough accuracy in weather forecasting and cyclone prediction using deep learning.