Hotpatching goes default in Windows Autopatch
… The feature installs security updates without requiring a restart, meaning changes take effect immediately. …
Search
Raspberry Pi OS ends open-door policy for sudo
… Passwordless sudo by default was a clear vulnerability, even if Raspberry Pi acknowledged that beefing up security is "a tricky balance." MORE CONTEXT We know what day it is but these Raspberry Pi price hikes are no joke Raspberry Pi leans into semiconductors as sales climb – especially in US and C… …
Git identity spoof fools Claude into giving bad code the nod
… In a blog published this week, Manifold Security showed how an AI-powered code reviewer built on Claude accepted changes that appeared to come from a legitimate maintainer. …
Xen Project announces five years of support for all releases
… Our aim is consistent, predictable security support across all releases,” the announcement states, adding that this scheme “strengthens Xen’s position in embedded and automotive use cases, while keeping the stable and security maintenance effort sustainable and avoiding changes to release cadence.”… …
AI gets good at finding bugs, not as good at fixing them
… But security researchers say that's not enough. The AI biz describes the research preview capability, dubbed Claude Code Security , as a way for security teams to find and fix flaws they might otherwise have missed. "This is a pivotal time for cybersecurity," the company said . …
Dutch navy frigate tracked by mailing it a Bluetooth tracker
… "So, as a frigate, you never want to reveal your location to other people." This isn't just a military lesson, either: Technological evolution means things that were totally acceptable in the enterprise world before may now be critical security risks that have yet to enter into your OPSEC equation.…
Sticky-note security turned gym into hall of '80s horrors
Security Sticky-note security turned gym into hall of '80s horrors Even fitness equipment is vulnerable to mischief makers these days PWNED Welcome back to Pwned, the column where we share war stories from IT soldiers who shot themselves – or watched someone else shoot themselves – in the foot. …
Microsoft publishes workaround for Samsung C:\ drive woes
… The issue, in which some Samsung devices lost access to the C:\ drive after installing a Windows security update, was traced to a problem in the Samsung Galaxy Connect app rather than Microsoft's update. …
LiteLLM infected with credential-stealing code via Trivy
… Trivy is an open source vulnerability scanner maintained by Aqua Security that many other projects include as a security measure. …
MCP 'design flaw' puts 200k servers at risk: Researcher
… "That's what it means to own the stack." ® supply chain ai anthropic open source security