Trail of Bits دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۵:۳۰

Backporting security fixes at scale with Codex

Stable Linux releases lack existing security fixes because backporting them is time-consuming and often thankless work. We’re using Codex to reduce the backporting process time from days to hours per fix, empowering human patch reviewers to rapidly submit fixes for critical software like Ubuntu Long Term Support, Fedora, and the Linux kernel. By October 29, our project helped deliver fixes for 149 distinct CVEs into…

Vulnerabilities & Zero-Day Networking & Internet Operating Systems Open Source

Read the full article at Trail of Bits Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

EFF دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۸:۴۰

Independent Digital Media Is Not a Privilege Governments Can Revoke: The Fight to Save Egypt’s Mada Masr

On November 11, Lina Attalah, founder and editor-in-chief of the independent Egyptian news outlet Mada Masr, will face trial for the second time in just two weeks. This time, she faces charges of spreading false news, an accusation that has become one of the Egyptian government's most frequently used tools for prosecuting journalists. The trial follows a conviction on October 27, when Attalah was found guilty of mana…

AI Security AI & Machine Learning Open Source

Source

BleepingComputer دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۸:۳۳

BTCPay Server warns of hot wallet thefts targeting outdated instances

The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot wallets" on instances running older versions. [...]

Hardware & Chips Open Source

Source

SANS Internet Storm Center دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۸:۲۲

Mutipath TCP: Use and Detection, (Mon, Nov 2nd)

Last week, an often-ignored&#;x26;#;xc2;&#;x26;#;xa0;TCP option, introduced in 2020, made the news due to a new vulnerability in Linux&#;x26;#;39;s implementation (RFC&#;x26;#;xc2;&#;x26;#;xa0;8684, &#;x26;#;xc2;&#;x26;#;xa0;CVE-2026-98432)

Vulnerabilities & Zero-Day Networking & Internet Operating Systems

Source

Help Net Security دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۸:۱۷

AI-powered infostealer picks out the most profitable parts of your stolen data

A new Windows infostealer sends the data it steals to an AI model and asks it to rank the victim’s assets by how much money they could bring in, Cisco Talos has found. “There is a new idea in the cybercrime world — cast a wide net, steal everything, and let AI sort out the specifics,” said Ryan Fetterman, a security researcher at Cisco. The malware calls itself VOLTA-AUTODOXER and turned up through Talos’ CAIRN … Mor…

Malware & Threats Operating Systems

Source