Category: Blog

A vulnerability in Cisco IOS XE is being exploited to install a backdoor

A critical vulnerability (CVE-2023-20198) has been identified in the web interface implemented on Cisco's physical and virtual devices running the Cisco IOS XE operating system, allowing unauthorized users to gain full access to the system with the highest privileges if they have access to the network port through which the web interface operates. The severity of the issue is exacerbated by the fact that attackers have been exploiting the unpatched […]

A new executive director has been appointed for the GNOME Foundation

The GNOME Foundation, which oversees the development of the GNOME desktop environment, has announced the appointment of Holly Million as the executive director, a position that has been vacant since August of last year following Neil McGovern's departure. The executive director is responsible for managing and developing the GNOME Foundation as an organization, as well as interacting with the board of directors, advisory board, and […]

Social network X will attempt to tackle bots with mandatory subscriptions

Twitter's experiments with paid subscriptions as a way to combat spam and misinformation continue. There have already been rumors online that X's pricing policy will categorize subscribers into three levels in terms of ad display volume, but now a different experiment has launched in New Zealand and the Philippines, which involves charging $1 […]

Fedora Atomic Desktop Initiative

The official releases of the Fedora Linux distribution, which utilize atomic system updates, have proposed the use of a single name, Fedora Atomic Desktop, for builds that do not separate into individual packages and update atomically. For naming atomic editions, it is suggested to use the name 'Fedora desktop_name Atomic', for example, if an atomic build with Xfce appears, it will be distributed as […]

Release of VirtualBox 7.0.12

Oracle has released a patch version of the VirtualBox virtualization system, 7.0.12, which includes 24 fixes. At the same time, an update for the previous branch, VirtualBox 6.1.48, has been formed with 9 changes, including support for Linux kernels 6.5 and 6.6-rc, support for kernel packages from OpenSUSE 15.5, improved support for Linux kernel 6.4, and fixes for kernel packages from RHEL 8.9 and […]

Assessment of issues with supporting open projects and using outdated dependencies

Sonatype, specializing in defending against attacks that manipulate software components and dependency substitution (supply chain), has published the results of a study (PDF, 62 pages) on issues with dependencies and maintenance of open projects in Java, JavaScript, Python, and .NET presented in Maven Central, NPM, PyPl, and Nuget repositories. Over the year, an increase in the number of projects in the monitored open ecosystems has been observed […]

Release OpenBSD 7.4

The release of the free UNIX-like operating system OpenBSD 7.4 has been announced. The OpenBSD project was founded by Theo de Raadt in 1995 after a conflict with the NetBSD developers, which resulted in Theo being denied access to the NetBSD CVS repository. Following this, Theo de Raadt and a group of like-minded individuals created a new open-source project based on the source tree of NetBSD […]

OpenBSD 7.4

Today, October 16, 2023, a new release of OpenBSD has been launched — version 7.4. This marks the 55th release, and as usual, the new version is full of improvements, such as the introduction of microcode update functionality for AMD processors, including a fix for the 'Zenbleed' bug; updates to DRM and graphics drivers; numerous enhancements to the SMP subsystem (with fewer locks in the kernel!); […]

Release of OpenSilver 2.0, continuing the development of Silverlight technology

The release of OpenSilver 2.0 has been announced, continuing the development of the Silverlight platform and allowing the creation of interactive web applications using C#, XAML, and .NET technologies. Applications compiled with OpenSilver can run in any desktop and mobile browsers that support WebAssembly, but compilation is currently only possible on Windows using Visual Studio. The project's code is written in […]

Remotely exploitable vulnerability in the NVMe-oF/TCP driver within the Linux kernel

A vulnerability (CVE-2023-5178) has been identified in the nvmet-tcp (NVMe-oF/TCP) Linux subsystem, which allows accessing NVMe drives over the network (NVM Express over Fabrics) using the TCP protocol. This vulnerability potentially enables remote code execution at the kernel level or, with local access, privilege escalation in the system. A patch is currently available for the fix. The issue manifests from the very first version of the NVMe-oF/TCP driver (in the report […]

Buy reliable website hosting with DDoS protection, VPS VDS servers 🔥 Buy reliable website hosting with DDoS protection, VPS VDS servers | ProHoster