Collaborate Disseminate
Up first, if you’re running a Roundcube install prior to 1.5.10 or 1.6.11, it’s time to update. We have an authenticated Remote Code Execution (RCE) in the Roundcube Webmail client. …read more Continue reading This Week in Security: Roundcube, Unified Threat Naming, and AI Chat Logs
This week Jonathan and Rob chat with Nate Graham about KDE! Why did Nate walk away from Apple, and how did he find Linux and KDE? And what does he …read more Continue reading FLOSS Weekly Episode 835: Board Member B
The CIA ran a series of web sites in the 2000s. Most of them were about news, finance, and other relatively boring topics, and they spanned 29 languages. And they …read more Continue reading This Week in Security: CIA Star Wars, Git* Prompt Injection and More
This week Jonathan chats with Ben Meadors and Rob Campbell about the boatload of software Microsoft just released as Open Source! What’s the motivation, why is the new Edit interesting, …read more Continue reading FLOSS Weekly Episode 834: It Was Cool in 2006
This week, Jonathan Bennett and Jeff Massie chat with Tom Herbert about eBPF, really fast networking, what the future looks like for high performance computing and the Linux Kernel, and …read more Continue reading FLOSS Weekly Episode 833: Up and Over
Spectre lives. We’ve got two separate pieces of research, each finding new processor primitives that allow Spectre-style memory leaks. Before we dive into the details of the new techniques, let’s …read more Continue reading This Week in Security: Lingering Spectre, Deep Fakes, and CoreAudio
Cryptographic messaging has been in the news a lot recently. Like the formal audit of WhatsApp (the actual PDF). And the results are good. There are some minor potential problems …read more Continue reading This Week in Security: Encrypted Messaging, NSO’s Judgement, and AI CVE DDoS
Researchers at Aikido run the Aikido Intel system, an LLM security monitor that ingests the feeds from public package repositories, and looks for anything unusual. In this case, the unusual …read more Continue reading This Week in Security: XRP Poisoned, MCP Bypassed, and More
This week, Jonathan Bennett and Randal Schwartz chat with Allen Firstenberg about Google’s AI plans, Vibe Coding, and Open AI! What’s the deal with agentic AI, how close are we …read more Continue reading FLOSS Weekly Episode 830: Vibes
The sky is falling. Or more specifically, it was about to fall, according to the security community this week. The MITRE Corporation came within a hair’s breadth of running out …read more Continue reading This Week in Security: No More CVEs, 4chan, and Recall Returns