What changed in nginx 1.30.0 and what it means for your upstream config

nginx 1.30.0 brings together features accumulated across the 1.29.x mainline series. The release covers a broad range of changes, from protocol support additions to security-relevant fixes and new configuration options. Keepalive to upstreams is now on… Continue reading What changed in nginx 1.30.0 and what it means for your upstream config

Legitify: Open-source scanner for security misconfigurations on GitHub and GitLab

Misconfigured source code management platforms remain a common entry point in software supply chain attacks, and organizations often lack visibility into which settings put them at risk. Legitify, an open-source tool from Legit Security, addresses that… Continue reading Legitify: Open-source scanner for security misconfigurations on GitHub and GitLab

OpenSSL 4.0.0 release cuts deprecated protocols and gains post-quantum support

OpenSSL 4.0.0 removes several long-deprecated features, adds support for Encrypted Client Hello, and introduces API-level changes that will require code updates for applications built against older versions. SSLv3, SSLv2 client hello, and engines are g… Continue reading OpenSSL 4.0.0 release cuts deprecated protocols and gains post-quantum support

DavMail 6.6.0 patches a regex flaw and advances its Microsoft Graph backend

Organizations that run DavMail to bridge standard mail clients to Microsoft Exchange or Office 365 received an update this week. Version 6.6.0 addresses a code-scanning alert tied to a regex vulnerability, adjusts OAuth redirect handling to match a rec… Continue reading DavMail 6.6.0 patches a regex flaw and advances its Microsoft Graph backend

AI adoption is outpacing the safeguards around it

AI is becoming part of professional and private life, reaching mainstream adoption faster than the personal computer or the internet. These systems are tested in reasoning, safety, and real-world tasks, but the reliability of those measurements remains… Continue reading AI adoption is outpacing the safeguards around it

Rockstar Games receives “pay or leak” warning after cyberattack

Rockstar Games, the developer behind titles such as Grand Theft Auto and Red Dead Redemption, has confirmed a cyberattack claimed by hacking group ShinyHunters, which says it accessed the company’s Snowflake environment and obtained data. The attackers… Continue reading Rockstar Games receives “pay or leak” warning after cyberattack

Seized VerifTools servers expose 915,655 fake IDs, 8 arrested

On April 7 and 8, Dutch police arrested eight suspects in a nationwide operation targeting users of the VerifTools platform as part of an identity fraud investigation. The suspects, all men aged 20 to 34, are accused of identity fraud, forgery, and cyb… Continue reading Seized VerifTools servers expose 915,655 fake IDs, 8 arrested

The fully free Linux OS Trisquel gets a major update with version 12.0 Ecne

Trisquel GNU/Linux, a free operating system aimed at home users, small enterprises, and educational centers, released version 12.0. The release, codenamed Ecne, is declared production-ready and builds on the previous version, Aramo, with changes to pac… Continue reading The fully free Linux OS Trisquel gets a major update with version 12.0 Ecne