Want to Rent an Internet Address at the White House?
Longtime Slashdot reader bbsguru shares a report from KrebsOnSecurity: Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy services is a Russian company whose founder’s web hosting business was groun … ⌘ Read more

Motorola’s Ultra Premium Smartphone Is Its First With GrapheneOS Support
Motorola’s $1,600 Signature 27 will become the company’s first smartphone to support the security- and privacy-focused GrapheneOS that completely strips out native Google services and telemetry at the OS level. To help justify the price, Motorola equipped the Signature 27 with top-of-the-line specs, including a tandem OLED disp … ⌘ Read more

Zlib 1.4 Released With More Than One Dozen Security Fixes
Zlib 1.4 is now available for this widely-used compression library. In these AI times, Zlib 1.4 ships with more than a dozen security fixes… ⌘ Read more

Debian, Ubuntu and derivatives hit by APT flaw that could give attackers root access
Got root? Someone else might have on your system - if you’re running Debian, Ubuntu and derivatives you’ll want to get updating soon.

Image

Read the full article on [GamingOnLinux](https://www.gamingonlinux.com/2026/11/debian-ubuntu-and-derivatives-hit-by-apt-flaw-that-could-gi … ⌘ Read more

Japanese Bank to Stop Allowing ATM Cards, PCs For Account Access
Mitsubishi UFJ Financial Group plans to launch Emut Bank in early 2027 as the first digital bank affiliated with a major Japanese financial institution to eliminate ATM cards, “instead having customers confirm identities using the bank’s smartphone app for additional security amid a rising tide of cyberattacks,” reports Nikkei Asia Review. The sma … ⌘ Read more

GIMP 3.2.8 Released With Many Refinements, Numerous Security Fixes Due To AI Reports
GIMP 3.2.8 is out today as the newest stable release of this open-source image editing application that’s most popular on the Linux desktop… ⌘ Read more

NetBSD 11.1 Released With Security Fixes & Other Improvements
Following the release of NetBSD 11.0 in August, NetBSD 11.1 is out today with a collection of security fixes and other improvements… ⌘ Read more

Cops Bust Botnet of 1.3 Million Android TV Boxes
A coalition of security firms working with Japan’s National Police Agency has disrupted a botnet of more than 1.3 million Android devices across 200+ countries. “We assess with high confidence that the backdoor and botnet were intentionally developed, deployed, and operated for financial gain by Videostrong Technology,” the Google Threat Intelligence Group (GTIG) said in a blog po … ⌘ Read more

Experts Expect ‘Security Reckoning’ As AI Tools Find And Exploit Software Bugs
The Washington Post reports:

Tens of thousands of South Koreans had their financial data exposed online in recent weeks after at least nine major banks there suffered cyberattacks that suggested a dark future for online security. One man, a 26-year-old living in southern China, was allegedly behind the attacks, according t … ⌘ Read more

Binance Reopens to $3.64 in Net Outflows. ‘98% Choose to Stay’, Says Its Founder
Binance now says it’s replenished 90% of assets stolen last week in a $6.3 billion security breach, its customers still “rushed to move funds off the platform” when it reopened Sunday, CNBC reports, and Binance “said it recorded $3.64 billion in net outflows after reopening withdrawals on Sunday.”

The exchange processed … ⌘ Read more

Religious Exemption from Using AI in Workplace Granted to Humanist
“David Durman, a nontheistic humanist, recently secured a religious exemption from using AI in the workplace,” reports TechCrunch.

Durman, a University of Kentucky administrator, told TechCrunch that humanism centers on “human well-being and flourishing, both individually and collectively … and implores a person to try to improve both their wel … ⌘ Read more

Another Week, Another Vibe Coded OS; Closed-Source In The Name Of Security
With today’s AI/LLM capabilities, there is almost a new operating system heard about each week “coded from scratch” predominantly via AI agents. This week was no exception with another project hitting our email inbox. Though most of them are open-source, this one is closed-source in the name of security… ⌘ Read more

Proton CEO Is In ‘Full AI Psychosis’
According to 404 Media, Proton CEO Andy Yen is aggressively pushing AI adoption while fostering what workers describe as a culture of fear that discourages raising security concerns or challenging leadership. The investigation is based on interviews with eight current and one former Proton employees, as well as internal Slack chats, meeting recordings, and an AI manifesto written by the company’s CTO. Longti … ⌘ Read more

Multi-Billion Binance Hack Hitting Crypto Markets
Binance is investigating a potential hack after more than $2 billion in crypto was drained from one of its wallets into a new external account, with Blockaid estimating nearly $3.3 billion was moved.

“Our teams are aware of reports of a potential security issue and are actively investigating,” said Binance on X.

“User funds are safe,” said Binance founder CZ. “It does look like … ⌘ Read more

Massive Leak Exposes 41,000 Homeland Security Workers
A massive leak has exposed records tied to more than 41,000 DHS employees and contractors, including roughly 10,000 ICE personnel. The data, reportedly taken from DHS’s Okta login system, reveals phone numbers, email and office addresses, reporting relationships, and permission groups associated with undercover operations, wiretapping and surveillance tools. Wired repor … ⌘ Read more

Luanti (formerly Minetest) reveal a major ContentDB security incident
The team behind Luanti (formerly Minetest), just recently announced a security incident with their ContentDB system.

Image

Read the full article on GamingOnLinux. ⌘ Read more

PHP2Shell Security Flaws Now Successfully Exploited
The critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have now been successfully exploited in the wild, just days after patches were released and initial exploitation attempts failed. BleepingComputer reports: The malicious activity was caught by Adel Karimi, detection and response lead at Perplexity, whose honeypots recorded evidence of confirmed re … ⌘ Read more

SteamOS 3.9.5 released with Plasma 6.7, Linux 7.2, Security Fixes, better Steam Frame wireless adapter support
Valve just released SteamOS 3.9.5 as stable for all users across all supported systems, bringing with it many exciting enhancements for Linux gaming.

Image

Read the full article on [GamingOnLinux](https://www.ga … ⌘ Read more

Zoe Kleinman: PHP Is the Cyber Equivalent of an Unexploded Bomb
BBC technology editor Zoe Kleinman likens the recently discovered PHP security vulnerabilities to an unexploded bomb, writing, “The PHP story feels like the cyber equivalent of an unexploded bomb – I have never seen such a dramatic, public and global response to a cyber event that hasn’t happened yet.” Although no successful attacks have been confi … ⌘ Read more

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
Trend Micro’s Zero Day Initiative appears to have accidentally disclosed several unpatched Linux kernel vulnerabilities on the public LKML instead of the private security list, including two CVSS 9.0 flaws that could enable remote code execution through SMB Direct and KSMBD. “This seemingly was a mistake … ⌘ Read more

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list. The vulnerabilities have yet to be patched on mainline but at least in some cases there are patches undergoing testing or queued in “-next” branches. The CVSS scores are as high as 9.0… ⌘ Read more

Linux 7.4 Adapts AMD Zen 6 For Less Costly CPU Security Mitigation
The x86/bugs pull request was merged this week for the Linux 7.4 kernel. Most notable here is adjusting the CPU security mitigations for AMD Zen 6 processors… ⌘ Read more

SteamOS 3.9.4 Beta brings updates for security, hibernation and regression fixes
Valve released a fresh SteamOS 3.9.4 Beta to fix up some annoying issues, along with a security update.

Image

Read the full article on [GamingOnLinux](https://www.gamingonlinux.com/2026/10/steamos-3-9-4-beta-brings-updates-for-security-hibernation-and-regression-fixes/ … ⌘ Read more

Steam Client update fixes Vulkan games hanging after alt-tab, and a security update
An annoying bug I’ve run into a few times recently has been solved - Vulkan games hanging after alt-tab should be fixed with this new Steam Client update.

Image

Read the full article on [GamingOnLinux](https://www.gamingonlinux.com/2026/10/steam-client-update-fixes-vulkan-games-hanging-afte … ⌘ Read more

America’s War Department Will Test Heat Ray Weapon For Potential Use
Longtime Slashdot reader destinyland shares a report from CNN: The Pentagon has given the Department of Homeland Security permission to test a military-grade heat ray and develop tactics to potentially use it in operations at the southern US border, according to a memo signed by Defense Secretary Pete Hegseth last month and obtained by CNN … ⌘ Read more

Sorry if the previous post broke anything, but between PHP-ageddon and the certificates with 3-bit keys today was just a ZALGO HE COMES kind of day.

OpenBSD 8.0 Released
OpenBSD 8.0 has been released with major virtualization and hardware upgrades, including support for up to 64 vCPUs per VM, Intel Arc graphics, ARM64 hibernation, and expanded RISC-V support. Linuxiac points out that it marks the “61st release of the security-focused Unix-like operating system.” From the report: Several fixes improve compatibility with 32-bit Linux guests, while changes to virtual machine ownership management and inte … ⌘ Read more

Meta Muse Exposes Users’ Personal, Business Secrets When They Share Conversations
Security researchers say Meta’s Muse AI assistant exposed thousands of users’ shared conversations because conversation titles were placed in subdomains that could be discovered through public DNS records. Meta has since suspended the sharing feature while it considers making changes. Ars Technica reports: Like many … ⌘ Read more

US Bans DeepSeek From Government Use
The Trump administration has banned DeepSeek AI from most US civilian federal agencies, ordering the removal of the Chinese company’s models and technology developed using them. The Department of Homeland Security did not specify the security threats behind the decision. The BBC reports: The order (PDF) is broad, as it requires agencies to ditch “all DeepSeek and DeepSeek-affiliate products, and third- … ⌘ Read more

@prologic@twtxt.net Potentially, but 64 MB is kinda small. I haven’t run a host with < 512 MB in quite some time, and it would take 8 @ 64MB to match that, although that would only be $1.40 (for the first 3) + $3.50 (for the last 5), so still under $5 a month…. Yeah, most likely, even if just for a couple of off-site services and secure backups.

I’ll be honest - I’ve had a VPS at DigitalOcean for years, but I barely use it anymore because I got big into “owning my own servers” (hence my interest in Self Hosted, which I just signed up for), so now I run a few repurposed old desktops throughout my house. But I trust you way more than I do some other random VPS provider, so again…. Yeah, most likely. 🙂

TP-Link Moves to Assemble Routers In the US Following Import Ban
TP-Link plans to begin assembling routers in Mississippi as early as 2027 after the FCC banned imports of new foreign-made consumer routers over security concerns. Engadget reports: The company has signed a letter of intent with manufacturer Key Tronic and, pending approval from regulators, TP-Link says stateside assembly of its routers could st … ⌘ Read more

Trump DHS Officials Asked CISA To Secretly Aquire and Hack a Voting Machine
Longtime Slashdot reader fahrbot-bot shares a report from ProPublica: A few months into President Donald Trump’s second term, political appointees at the Department of Homeland Security (DHS) wanted Cybersecurity and Infrastructure Security Agency (CISA) to secretly acquire a voting machine and hack it. The appointees wa … ⌘ Read more

A Hacker Broke Into John Deere, SharkNinja With an Army of AI Agents
An anonymous reader quotes a report from The Verge: A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security firm Norforge. Though Norforge doesn’t name the targets, Reuters reports that the victims included companies like John Deere, SharkNinja, and C … ⌘ Read more

Ubuntu Touch 24.04-2.1 Brings New Hardware Support & Important Security Fix
Ubuntu Touch 24.04-2.1 was released on Friday as the latest update to this community-maintained tablet/smartphone Ubuntu Linux platform. Ubuntu Touch 24.04-1.5 was also released as a maintenance update for the prior series… ⌘ Read more

17 More Security Vulnerabilities Made Public For X.Org Libraries
Just shy of two weeks since a dozen vulnerabilities were published for the X.Org Server and XWayland, more than one dozen vulnerabilities were made public today affecting multiple X.Org client libraries… ⌘ Read more

Microsoft Releases Microsoft Defender For The Linux Desktop
Microsoft’s newest software release for Linux is… Microsoft Defender for the Linux desktop. Microsoft Defender has been ported to Linux to “secure Linux desktops” with Microsoft acknowledging that “more developers begin to use Linux desktops” and thus bringing their security application and threat-protection product to Linux desktops to complement their prior ill-used Linux server support… ⌘ Read more

Microsoft Defender Now Supports Linux Desktops
“Starting today, Linux desktops are now officially supported by Microsoft Defender,” reports Neowin. A public preview of the threat detection app extends its enterprise security platform beyond servers to developer workstations running distributions such as Ubuntu, Debian, Fedora, and RHEL. The offering includes antivirus protection, endpoint detection and response, vulnerability … ⌘ Read more

Rustls 0.23.46 Released With Four Security Fixes
Rustls as the modern TLS library written in the Rust programming language with an emphasis on memory safety is out today with its v0.23.46 release in order to ship four new security fixes… ⌘ Read more

GTA 6 Is Reportedly Coming to PC In Early 2027
GamesBeat reports that Rockstar plans to release Grand Theft Auto VI on PC in the first quarter of 2027, just a few months after its November 19, 2026 launch on consoles. The report follows Microsoft’s announcement last week that it had secured exclusive cloud-streaming rights to the game. Since Rockstar has yet to officially announce a PC version, “this deal will allow Xbox to mar … ⌘ Read more

A College Told Flock to Remove Its Cameras. The Company Refused.
The Chicago Sun-Times reports:

When Elgin Community College hired Flock Safety to install six surveillance cameras in April 2025, President Peggy Heinrich thought they would “enhance the safety and security of students….” They were supposed to help locate stolen cars and missing people. But Heinrich started to wonder if the cameras were actually … ⌘ Read more

Claude Sent Police a Fake Murder Tip. White House Mandates AI Companies Report Security Incidents
AFP reports that an AI model from Anthropic “submitted a fabricated tip about an unsolved homicide to Philadelphia police, authorities said Friday.”

Claude “was instructed never to log in, create accounts, enter personal data, make purchases, or submit anything destructive, but the inst … ⌘ Read more

Linux Patches Finally Make Hibernation Possible In Secure Boot / Lockdown Mode
When booting the Linux kernel using UEFI SecureBoot, the kernel is put in the lockdown mode to restrict the ability to modify the running kernel image or leaking data from kernel memory. Kernel lockdown mode can also be manually enabled by the user/administrator. Among the limitations imposed in Linux’s lockdown mode is no hibernation support. But that soon may be relieved with new patches proposed… ⌘ Read more

Microsoft Issues First Release Of Their LiteBox Sandboxing Library OS
Back in February we featured LiteBox as a new Microsoft open-source project building out a Rust-based sandboxing Library OS. LiteBox leverages Linux virtualization security features and Rust language inherent benefits to provide the ability for sandboxing Linux apps on Linux, Linux programs on Windows, and other security-oriented deployments. Out today is the first tagged release of LiteBox for this open-source library operating system… ⌘ Read more

Xbox Secures Exclusive GTA 6 Streaming Rights
Microsoft has reportedly secured exclusive cloud-streaming rights for Grand Theft Auto VI, meaning Xbox Cloud Gaming will be the only service able to stream the game at launch. “Rockstar Games still hasn’t announced a PC version of Grand Theft Auto VI, so this deal will allow Xbox to market its Xbox Cloud Gaming service to PC players who would otherwise need an Xbox Series X / S or … ⌘ Read more

xorg-server 21.1.25 and xwayland 24.1.14 released due to more security issues
New versions of X.Org and XWayland have been released since more security issues have been revealed.

Image

Read the full article on GamingOnLinux. ⌘ Read more

Another Dozen Vulnerabilities Found In The X.Org Server & XWayland
With the assistance of AI, another dozen security vulnerabilities affecting both the conventional X.Org Server as well as XWayland were made public this evening… ⌘ Read more

Hackers Steal 8 Million Citizens’ Records From Danish Government Database
Hackers stole records belonging to roughly 8 million Danish citizens and residents from Denmark’s Central Person Register (CPR), including names, addresses, social security numbers and other personal information. The breach is believed to be the largest in Denmark’s history. TechCrunch reports: The CPR is a government database of … ⌘ Read more

Meta Rushed To Fix Muse ‘VM Escape’ Vulnerability Soon Before Launch
An anonymous reader quotes a report from 404 Media: In the immediate weeks before Muse’s launch, Meta engineers found several security vulnerabilities in the company’s viral AI agent product, at least one of which could have allowed malicious users to break outside of Muse’s intended environment and access Meta’s own sensitive databases and … ⌘ Read more

Linux 7.4 To Land New BTB CTX Isolation Feature Of AMD Zen 6
The Linux 7.4 kernel is set to introduce support for a new AMD Zen 6 security feature… ⌘ Read more

How Python Will Test Adding Rust Into CPython
Python’s security developer-in-residence Seth Larson reports from this year’s official core developer Python Language Summit:

“No one said ‘don’t do this’ last year”. After testing the waters at PyCon US 2025, [software engineer] David Hewitt returned to the Python Language Summit asking what Python core developers want from Rust, along with proposed timelines, phases, and s … ⌘ Read more