Internet News Section
Security researchers from Secure Annex have noted the increasing popularity of a new method for monetizing browser extensions, which forms a distributed network of extension users utilized for scraping (indexing website content). User systems operate as web bots and proxies to download site content — the installed browser extension receives instructions from an external server for indexing sites, after […]
Google has announced a change in the organization of testing for upcoming versions of the Android platform under development. The publication of individual Android Developer Previews has been discontinued, replaced by a separate, continuously existing Android Canary branch that allows application developers to test API changes and improvements in the early stages. The formation of Android beta releases focuses not on familiarization with […]
The release of the Apache HTTP Server 2.4.64 has been presented, which addresses 8 vulnerabilities and includes 19 changes. The fixed vulnerabilities (the first 4 have a moderate level of severity, while the rest are low): CVE-2024-42516 — the possibility of an HTTP response splitting attack on frontend-backend systems, allowing for the header Content-Type in the response to be split to interject into the content of responses handled by other users […]
Igor Ljubuncic, who until 2024 was responsible at Canonical for products related to high-performance computing, conducted performance and energy consumption testing of KDE Plasma 6.4 sessions based on X11 and Wayland. At the end of June, Igor published a review of KDE Plasma 6.4 capabilities, where he concluded that the Wayland-based session lags behind in performance and […]
After two years of development, the OISF (Open Information Security Foundation) has released the Suricata 8.0 network intrusion detection and prevention system, which provides means for inspecting various types of traffic. In Suricata configurations, it is permissible to use a signature database developed by the Snort project, as well as the Emerging Threats and Emerging Threats Pro rule sets. The project's source code is distributed under the GPLv2 license. The main […]
ByteDance has introduced the TikTokSans font, optimized for displaying mobile interfaces on high-density pixel screens and creating subtitles for videos (the font is already applied by default when displaying subtitles in videos hosted on the TikTok service). TikTokSans is also well-suited for use in web and user interfaces. The original components of the font are open under the OFL 1.1 license […]
Red Hat has announced the Red Hat Enterprise Linux for Business Developers initiative, which allows for the free download and use of the Red Hat Enterprise Linux 10 distribution in enterprises for application development and testing. Each participant in the Red Hat Developer program is allowed free use of up to 25 instances of the distribution. This initiative expands the previously existing Red Hat Developer program that allowed free use of […]
AMD has disclosed information about a new class of microarchitectural attacks on its processors—TSA (Transient Scheduler Attack). This attack allows an attacker to bypass CPU isolation mechanisms and determine data being processed in other contexts, for instance, to obtain information processed at the kernel level from user space or to learn data used in another guest system from a guest system. Vulnerabilities were identified during […]
Corrective releases of the distributed source control system Git versions 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1 have been published, which fix vulnerabilities that allow attackers to execute their code on a user's system when performing a repository cloning operation controlled by the attacker. CVE-2025-48384—this vulnerability is caused by Git clearing specified trailing newline characters when reading configuration parameter values […]
The release of the Thunderbird 140 email client has been announced, developed by the community and based on Mozilla technologies. Thunderbird 140 is built on the ESR codebase of Firefox 140 and is classified as a long-term support version, which receives updates throughout the year. Key changes in Thunderbird 140 include improved dark mode implementation. The message panel has integrated the Dark extension.
The developers of the Ardour audio editor have removed support for building with the GTK2 library from the codebase and only left the option of using YTK. YTK is a fork of GTK2 created by the Ardour project in February 2024. The reason for discontinuing the GTK2 build is linked to the addition of extra functionality in YTK, which supports touchscreen input devices and provides rendering capabilities on the platform.
After six months of development, OBS Studio 31.1 has been released, a package for streaming, compositing, and recording video. The code is written in C/C++ and is distributed under the GPLv2 license. Builds are available for Linux (flatpak), Windows, and macOS. The goal of developing OBS Studio was to create a portable version of the Open Broadcaster Software (OBS Classic) that is not tied to the Windows platform and supports OpenGL.