Intelligence Feed
showing 100 items
Reconciling the Past: Correcting Records for Unfixed Kubernetes CVEs
Kubernetes Blog · Kubernetes · src 8 · Tue, 26 May 2026 09:30:00 -0800 · HIGH 100
<p>The Kubernetes project relies on transparency to empower cluster administrators and security
researchers. One important way we do that is by publishing CVE records into the Common
Vulnerabilities and Exposures database. As part of our ongoing effort to mature the official
<a href="https://kubernetes.io/docs/reference/issues-security/official-cve-feed/index.json">Kubernetes CVE Feed</a>, we have identified
some dis
Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to Beta
Kubernetes Blog · Kubernetes · src 8 · Fri, 04 Sep 2026 10:30:00 -0800 · HIGH 100
<p>Kubernetes v1.37 promotes the <code>KubeletInUserNamespace</code> feature gate to beta.
With this feature enabled, all of the node components (kubelet, CRI and OCI runtimes,
CNI plugins, and kube-proxy) can run as a non-root user on the host, using a
<a href="https://man7.org/linux/man-pages/man7/user_namespaces.7.html">Linux user namespace</a>.
This technique is also known as <em>rootless mode</em>.
The work star
Scaling Kubernetes Workloads with Node Swap
Kubernetes Blog · Kubernetes · src 8 · Mon, 05 Oct 2026 10:00:00 -0800 · HIGH 100
<p>Memory is often the first hard limit a Kubernetes cluster hits.
Nodes run out of RAM long before they run out of CPU, and the new wave of agentic AI workloads makes this worse.
These workloads demand large memory footprints to start up and run untrusted code, then sit idle waiting for the next prompt.
That idle but resident memory is expensive, and it caps how many pods a node can hold. This is where swap helps. K
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
The Hacker News · Cybersecurity · src 8 · Mon, 12 Oct 2026 14:32:14 +0530 · HIGH 100
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.
The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
The Hacker News · Cybersecurity · src 8 · Mon, 12 Oct 2026 16:06:56 +0530 · HIGH 100
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure.
The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests on their
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
The Hacker News · Cybersecurity · src 8 · Wed, 14 Oct 2026 16:30:00 +0530 · HIGH 100
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part.
TL;DR
During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer's production website, on its own.
One login request let the user choose where the one-time passcode went.
The attack was the easy part. Proving it
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
The Hacker News · Cybersecurity · src 8 · Wed, 14 Oct 2026 18:00:42 +0530 · HIGH 100
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability.
The security flaw, tracked as CVE-2026-104935 (CVSS score: 8.6), is a case of authentication bypass impacting ICS
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
The Hacker News · Cybersecurity · src 8 · Thu, 15 Oct 2026 12:37:05 +0530 · HIGH 100
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian.
Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM.
The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
The Hacker News · Cybersecurity · src 8 · Thu, 15 Oct 2026 17:16:49 +0530 · HIGH 100
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation.
The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface.
"A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS software enables an
Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules
The Hacker News · Cybersecurity · src 8 · Thu, 15 Oct 2026 17:37:20 +0530 · HIGH 100
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19.
An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several exploit paths exist through contributed modules, and at least one known path needs no login.
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
The Hacker News · Cybersecurity · src 8 · Thu, 15 Oct 2026 17:58:13 +0530 · HIGH 100
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.
One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images.
The fixes are in
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
The Hacker News · Cybersecurity · src 8 · Fri, 16 Oct 2026 00:19:33 +0530 · HIGH 100
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories.
The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
The Hacker News · Cybersecurity · src 8 · Fri, 16 Oct 2026 01:54:36 +0530 · HIGH 100
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it.
The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The Hacker News · Cybersecurity · src 8 · Fri, 16 Oct 2026 12:25:55 +0530 · HIGH 100
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026.
The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
BleepingComputer · Cybersecurity · src 9 · Wed, 14 Oct 2026 18:56:47 -0400 · HIGH 100
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
BleepingComputer · Cybersecurity · src 9 · Thu, 15 Oct 2026 16:25:04 -0400 · HIGH 100
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
BeyondTrust patches zero-day exploited in attacks since August
BleepingComputer · Cybersecurity · src 9 · Fri, 16 Oct 2026 02:18:08 -0400 · HIGH 100
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]
FBI Arrests Executive at Ransomware Negotiation Firm
Krebs on Security · Cybersecurity · src 10 · Sat, 10 Oct 2026 00:17:42 +0000 · HIGH 95
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity.
Kubernetes v1.36: Pod-Level Resource Managers (Alpha)
Kubernetes Blog · Kubernetes · src 8 · Fri, 01 May 2026 10:35:00 -0800 · HIGH 91
<p>Kubernetes v1.36 introduces
<a href="https://kubernetes.io/docs/concepts/resource-management/resource-managers/#pod-level-resource-managers">Pod-Level Resource Managers</a>
as an alpha feature, bringing a more flexible and powerful resource management
model to performance-sensitive workloads. This enhancement extends the kubelet's
Topology, CPU, and Memory Managers to support pod-level resource specifications
(<co
Kubernetes v1.36: Admission Policies That Can't Be Deleted
Kubernetes Blog · Kubernetes · src 8 · Mon, 04 May 2026 10:35:00 -0800 · HIGH 91
<p>If you've ever tried to enforce a security policy across a fleet of
Kubernetes clusters, you've probably run into a frustrating chicken-and-egg
problem. Your admission policies are API objects, which means they don't
exist until someone creates them, and they can be deleted by anyone with
the right permissions. There's always a window during cluster bootstrap
where your policies aren't active yet, and there's no w
Kubernetes v1.36: More Drivers, New Features, and the Next Era of DRA
Kubernetes Blog · Kubernetes · src 8 · Thu, 07 May 2026 10:35:00 -0800 · HIGH 91
<p>Dynamic Resource Allocation (DRA) has fundamentally changed how platform administrators handle hardware
accelerators and specialized resources in Kubernetes. In the v1.36 release, DRA
continues to mature, bringing a wave of feature graduations, critical usability
improvements, and new capabilities that extend the flexibility of DRA to native
resources like memory and CPU, and support for ResourceClaims in PodGroup
Kubernetes v1.36: Deprecation and removal of Service ExternalIPs
Kubernetes Blog · Kubernetes · src 8 · Thu, 14 May 2026 10:35:00 -0800 · HIGH 91
<p>The <code>.spec.externalIPs</code> field for <a href="https://kubernetes.io/docs/concepts/services-networking/service/">Service</a> was an early attempt to provide
cloud-load-balancer-like functionality for non-cloud clusters.
Unfortunately, the API assumes that every user in the cluster is fully
trusted, and in any situation where that is not the case, it enables
various security exploits, as described in
<a href
Kubernetes v1.36: Mixed Version Proxy Graduates to Beta
Kubernetes Blog · Kubernetes · src 8 · Fri, 15 May 2026 10:00:00 -0800 · HIGH 91
<p>Back in Kubernetes 1.28, we introduced the <code>Mixed Version Proxy (MVP)</code> as an Alpha feature (under the feature gate <code>UnknownVersionInteroperabilityProxy</code>) in a <a href="https://kubernetes.io/blog/2023/08/28/kubernetes-1-28-feature-mixed-version-proxy-alpha/">previous blog post</a>. The goal was simple but critical: make cluster upgrades safer by ensuring that requests for resources not yet kno
Kubernetes v1.37: Scheduler Preemption for In-Place Pod Resize (Alpha)
Kubernetes Blog · Kubernetes · src 8 · Thu, 10 Sep 2026 10:30:00 -0800 · HIGH 91
<p>In Kubernetes, resource allocation has historically been a static decision made during a Pod's initial scheduling and placement. With the graduation of the core <a href="https://kubernetes.io/blog/2025/12/19/kubernetes-v1-35-in-place-Pod-resize-ga/">in-Place Pod resize</a> feature to General Availability in v1.35, application developers and cluster operators gained the powerful ability to dynamically adjust CPU an
Kubernetes v1.37: Pod-Level Resource Managers graduated to Beta
Kubernetes Blog · Kubernetes · src 8 · Tue, 15 Sep 2026 10:30:00 -0800 · HIGH 91
<p>With the release of Kubernetes v1.37, the <strong>Pod-Level Resource Managers</strong>
feature has graduated to <strong>Beta</strong> status (disabled by default)!</p>
<p>First introduced as an Alpha feature in
<a href="https://kubernetes.io/blog/2026/05/01/kubernetes-v1-36-feature-pod-level-resource-managers-alpha/">Kubernetes v1.36</a>,
this enhancement builds on
<a href="https://kubernetes.io/blog/2025/09/22/ku
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Krebs on Security · Cybersecurity · src 10 · Thu, 27 Aug 2026 11:04:15 +0000 · HIGH 90
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.
In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 and 23, were arrested in connection with a "sophisticated cybercrime syndica
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
The Hacker News · Cybersecurity · src 8 · Thu, 15 Oct 2026 12:13:08 +0530 · HIGH 88
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners.
The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep authentication and execute arbitrary commands on affected systems.
In a report published earlier
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
The Hacker News · Cybersecurity · src 8 · Thu, 15 Oct 2026 18:28:05 +0530 · HIGH 88
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005.
There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specific configuration to exploit.
A fourth lets an attacker forge a TLS session that could
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
The Hacker News · Cybersecurity · src 8 · Fri, 16 Oct 2026 10:29:36 +0530 · HIGH 88
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.
The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a
Kubernetes v1.36: PSI Metrics for Kubernetes Graduates to GA
Kubernetes Blog · Kubernetes · src 8 · Tue, 12 May 2026 10:35:00 -0800 · HIGH 86
<p>Since its original implementation in the Linux kernel in 2018,
<em>Pressure Stall Information</em> (PSI) has provided users
with the high-fidelity signals needed to identify resource saturation before it becomes an outage.
Unlike traditional utilization metrics, PSI tells the story of tasks stalled and time lost, all in nicely-packaged percentages of time across the CPU, memory, and I/O.</p>
<p>With the recent rel
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
The Hacker News · Cybersecurity · src 8 · Mon, 12 Oct 2026 20:46:26 +0530 · HIGH 83
Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone do something about it.
But speed is only part of the problem. A secure connection didn't always mean a safe destination. People offering to fix a ransomware mess had questions to answer themselves.
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
The Hacker News · Cybersecurity · src 8 · Wed, 14 Oct 2026 13:16:57 +0530 · HIGH 83
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine.
The bug is tracked as CVE-2026-74580 and named Vghost. Tencent Zhuque Lab, which found the
Spotlight on WG Device Management
Kubernetes Blog · Kubernetes · src 8 · Wed, 24 Jun 2026 10:00:00 -0800 · HIGH 78
<p>The rising popularity of AI, Edge, and Telecommunications workloads on Kubernetes has led to new requirements for hardware management. We now need hardware specification beyond CPU time and memory allocations. This includes allocating GPUs, TPUs, network interfaces, and other hardware, sometimes after pod start and occasionally through time-sharing.</p>
<p>Efficiently managing this specialized hardware is the miss
[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls
The Hacker News · Cybersecurity · src 8 · Tue, 13 Oct 2026 17:27:06 +0530 · HIGH 78
The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next.
With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate. A compromised account that looks legitimate at first could become the starting point for a much
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
The Hacker News · Cybersecurity · src 8 · Wed, 14 Oct 2026 10:04:43 +0530 · HIGH 78
Microsoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation.
These include 1,102 flaws in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Server. Of these, more than 670 relate to privilege escalation, followed by over 300 remote code
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
The Hacker News · Cybersecurity · src 8 · Wed, 14 Oct 2026 16:49:02 +0530 · HIGH 78
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said.
Its researchers built the attack in six days by directing AI agents running OpenAI's publicly available GPT-5.6 Sol model. Google has since confirmed all three bugs, fixed them, and paid XBOW its top $
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
The Hacker News · Cybersecurity · src 8 · Wed, 14 Oct 2026 07:29:25 +0530 · HIGH 75
A Saudi national and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to covertly record sensitive conversations.
Abdulrahman Alfozan, 35, has been charged with using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications. He was arrested by
Seven stable kernels for Thursday with fix for critical vulnerability
LWN Headlines · Linux/System · src 9 · Thu, 15 Oct 2026 13:01:31 +0000 · HIGH 74
<p>Greg Kroah-Hartman has announced the release of the <a href="https://lwn.net/Articles/1100616/">7.2.11</a>, <a href="https://lwn.net/Articles/1100617/">6.18.57</a>,
<a href="https://lwn.net/Articles/1100618/">6.12.113</a>, <a href="https://lwn.net/Articles/1100619/">6.6.159</a>, <a href="https://lwn.net/Articles/1100620/">6.1.190</a>,
<a href="https://lwn.net/Articles/1100621/">5.15.223</a>, and <a href="https://l
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
The Hacker News · Cybersecurity · src 8 · Tue, 13 Oct 2026 23:33:18 +0530 · HIGH 73
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it.
The flaw was in the feature that converts a personal account into an organization, Docker said in a security advisory on October 12.
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
The Hacker News · Cybersecurity · src 8 · Wed, 14 Oct 2026 23:08:31 +0530 · HIGH 73
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.
A web shell is a small file that executes any command an attacker sends via a web request, with the rights of the web server account. The flaw
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
The Hacker News · Cybersecurity · src 8 · Thu, 15 Oct 2026 00:08:56 +0530 · HIGH 73
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday.
The attacker sends an email with a crafted attachment through the gateway and, if it succeeds, could then run commands as root. The appliance filters an organization's email for spam, malware,
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
The Hacker News · Cybersecurity · src 8 · Tue, 13 Oct 2026 23:03:11 +0530 · HIGH 68
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to "act immediately." A fix for the third is still pending, according to Volexity.
Volexity, which reported the flaws to Ivanti,
Kubernetes v1.36: In-Place Vertical Scaling for Pod-Level Resources Graduates to Beta
Kubernetes Blog · Kubernetes · src 8 · Thu, 30 Apr 2026 10:35:00 -0800 · HIGH 66
<p>Following the graduation of Pod-Level Resources to Beta in v1.34 and the General Availability (GA) of In-Place Pod Vertical Scaling in v1.35, the Kubernetes community is thrilled to announce that <strong>In-Place Pod-Level Resources Vertical Scaling has graduated to Beta in v1.36!</strong></p>
<p>This feature is now enabled by default via the <code>InPlacePodLevelResourcesVerticalScaling</code> feature gate. It al
Kubernetes v1.36: Declarative Validation Graduates to GA
Kubernetes Blog · Kubernetes · src 8 · Tue, 05 May 2026 10:35:00 -0800 · HIGH 66
<p>In Kubernetes v1.36, <strong>Declarative Validation</strong> for Kubernetes native types has reached General Availability (GA).</p>
<p>For users, this means more reliable, predictable, and better-documented APIs. By moving to a declarative model, the project also unlocks the future ability to publish validation rules via OpenAPI and integrate with ecosystem tools like Kubebuilder. For contributors and ecosystem de
Kubernetes v1.36: Server-Side Sharded List and Watch
Kubernetes Blog · Kubernetes · src 8 · Wed, 06 May 2026 10:35:00 -0800 · HIGH 66
<p>As Kubernetes clusters grow to tens of thousands of nodes, controllers that watch
high-cardinality resources like Pods face a scaling wall. Every replica of a
horizontally scaled controller receives the full stream of events from the API
server, paying the CPU, memory, and network cost to deserialize everything, only
to discard the objects it is not responsible for. Scaling out the controller
does not reduce per-r
Kubernetes v1.36: Advancing Workload-Aware Scheduling
Kubernetes Blog · Kubernetes · src 8 · Wed, 13 May 2026 10:35:00 -0800 · HIGH 66
<p>AI/ML and batch workloads introduce unique scheduling challenges that go beyond simple Pod-by-Pod scheduling.
In Kubernetes v1.35, we introduced the first tranche of <em>workload-aware scheduling</em> improvements,
featuring the foundational Workload API alongside basic <em>gang scheduling</em> support built on a Pod-based framework,
and an <em>opportunistic batching</em> feature to efficiently process identical P
Announcing etcd 3.7.0-beta.0
Kubernetes Blog · Kubernetes · src 8 · Wed, 20 May 2026 00:00:00 +0000 · HIGH 66
<p>SIG-Etcd announces the availability of the <a href="https://github.com/etcd-io/etcd/releases/tag/v3.7.0-beta.0">first beta release of etcd v3.7.0</a>. This new version of the popular distributed database and key Kubernetes component includes the long-requested RangeStream feature, as well as a refactoring and cleanup of multiple legacy components and interfaces. v3.7 will deliver improved security, better operatio
From Kubernetes Dashboard to Headlamp: Understanding the Transition
Kubernetes Blog · Kubernetes · src 8 · Mon, 01 Jun 2026 10:00:00 -0800 · HIGH 66
<p>For many people, Kubernetes Dashboard was their first window into Kubernetes. It offered a simple visual way to see what was running in a cluster, inspect resources, and build confidence without relying on the command line. For years, it helped developers, students, and operators make sense of Kubernetes, and it served as an important onramp into the ecosystem.</p>
<p>The Kubernetes Dashboard project has now been
See your serverless: introducing the Headlamp plugin for Knative
Kubernetes Blog · Kubernetes · src 8 · Thu, 25 Jun 2026 10:00:00 -0800 · HIGH 66
<p><a href="https://headlamp.dev/">Headlamp</a> is an open-source, extensible Kubernetes SIG UI project designed to let you explore, manage, and debug cluster resources.</p>
<p><a href="https://knative.dev/">Knative</a> brings serverless workloads to Kubernetes, handling traffic routing, autoscaling, and revision management so teams can deploy and iterate without fighting infrastructure. But operating Knative workloa
Inspect Volcano workloads faster with Headlamp
Kubernetes Blog · Kubernetes · src 8 · Thu, 25 Jun 2026 12:00:00 -0800 · HIGH 66
<p><a href="https://volcano.sh/">Volcano</a> is a cloud native batch scheduler for Kubernetes, built for high-performance computing, AI/ML, and other batch workloads.</p>
<p><a href="https://headlamp.dev/">Headlamp</a> is an extensible Kubernetes web UI. With its plugin system, Headlamp can surface APIs and workflows beyond the built-in Kubernetes resources. The Volcano plugin brings core Volcano resources into Headl
Introducing the Cluster API plugin for Headlamp
Kubernetes Blog · Kubernetes · src 8 · Thu, 25 Jun 2026 14:00:00 -0800 · HIGH 66
<p><a href="https://headlamp.dev/">Headlamp</a> is an open-source, extensible Kubernetes SIG UI
project designed to let you explore, manage, and debug cluster resources directly
from a browser.</p>
<p><a href="https://cluster-api.sigs.k8s.io">Cluster API (CAPI)</a> is a Kubernetes sub-project
that brings declarative, Kubernetes-style APIs to cluster lifecycle management. It
lets platform teams provision, upgrade, and
Open source maintainership in the age of AI
Kubernetes Blog · Kubernetes · src 8 · Fri, 26 Jun 2026 10:00:00 -0800 · HIGH 66
<p>AI has really changed the game around software development.
More people are leveraging AI than ever to contribute patches to projects they use.
To me, this is a good thing as more folks will contribute patches rather than fork or not fix them.
The main problem is that AI has made generating code fast but there has been very little improvement in maintaining code bases.
In this post, we will highlight the ways the
Announcing etcd v3.7.0
Kubernetes Blog · Kubernetes · src 8 · Wed, 08 Jul 2026 20:00:00 +0800 · HIGH 66
<p><em>This article is a mirror of the <a href="https://etcd.io/blog/2026/announcing-etcd-3.7/">original announcement</a></em></p>
<p>Today, SIG etcd is releasing <a href="https://github.com/etcd-io/etcd/releases/tag/v3.7.0">etcd v3.7.0</a>, the latest minor release of the popular distributed key-value store and core Kubernetes component. v3.7 ships the long-requested RangeStream feature, delivers several other perfo
Kubernetes Dashboard to Headlamp: A Step-by-Step Guide
Kubernetes Blog · Kubernetes · src 8 · Mon, 13 Jul 2026 10:00:00 -0800 · HIGH 66
<h2 id="1-before-you-start-know-what-is-changing">1. Before you start: know what is changing<a class="td-heading-self-link" href="https://kubernetes.io/feed.xml#1-before-you-start-know-what-is-changing"></a></h2><p>Kubernetes Dashboard and Headlamp both show what is running in a cluster, but they work differently. When Headlamp runs on the desktop, it uses your existing kubeconfig to connect to one or more clusters a
Operating AI/ML Workloads on Kubernetes: A Headlamp Plugin for Kubeflow
Kubernetes Blog · Kubernetes · src 8 · Mon, 13 Jul 2026 12:00:00 -0800 · HIGH 66
<p>Kubernetes has quietly become the default platform for AI and machine learning. Whether you run notebook servers for data scientists, schedule distributed training jobs, tune hyperparameters, or orchestrate multi-step ML pipelines, those workloads increasingly land on a Kubernetes cluster. <a href="https://www.kubeflow.org/">Kubeflow</a> is one of the most popular ways to assemble that stack, and it does so the Ku
Building a Custom Metrics Exporter for Kubernetes
Kubernetes Blog · Kubernetes · src 8 · Tue, 14 Jul 2026 10:00:00 -0800 · HIGH 66
<p>Kubernetes ships with built-in awareness of CPU and memory, but most
real-world scaling decisions depend on signals that live entirely outside
that narrow window: how many messages are waiting in a queue, how long
the last batch job took, how many active WebSocket connections a pod is
holding. When the built-in metrics are not enough, a <em>metrics exporter</em>
bridges that gap.</p>
<p>This post walks through wri
Kubernetes v1.37 Sneak Peek
Kubernetes Blog · Kubernetes · src 8 · Fri, 31 Jul 2026 08:00:00 -0800 · HIGH 66
<p>As we get closer to the release date for Kubernetes v1.37, the project develops and matures,
features may be deprecated, removed, or replaced with better ones for the project's overall
health. This blog outlines some of the planned changes for the Kubernetes v1.37 release that the
release team feels you should be aware of for the continued maintenance of your Kubernetes
environment and keeping up to date with the
Gateway API v1.6: TCPRoute and UDPRoute Graduate to Standard
Kubernetes Blog · Kubernetes · src 8 · Mon, 03 Aug 2026 08:00:00 -0800 · HIGH 66
<p><img alt="Gateway API logo" src="https://kubernetes.io/blog/2026/08/03/gateway-api-v1-6-release/gateway-api-logo.svg" /></p>
<p>The Kubernetes SIG Network community is thrilled to share the release of <strong>Gateway API v1.6.0</strong>, which was released on June 30th of this year!</p>
<p>Gateway API has become the standard for modern, role-oriented,
and expressive service networking in Kubernetes.
In previous re
How to Pretty-Print Your Kubernetes YAML as KYAML and Why You'd Want To
Kubernetes Blog · Kubernetes · src 8 · Tue, 11 Aug 2026 10:00:00 -0800 · HIGH 66
<p>YAML has been the standard way to write Kubernetes manifests for years. Every example, tutorial, and configuration file you come across is written in it. The problem isn't that YAML is a bad format. It's that YAML gives you a lot of choices, and not all of them are equally good for writing Kubernetes manifests. Some features make files harder to read, some are easy to misuse and others can lead to surprising behav
Kubernetes v1.37: Metrics API graduates to stable
Kubernetes Blog · Kubernetes · src 8 · Thu, 27 Aug 2026 10:30:00 -0800 · HIGH 66
<p>Kubernetes v1.37 promotes the <code>metrics.k8s.io</code> API to stable (<code>v1</code>). This
API provides CPU and memory usage for nodes and Pods, and is the API behind
commands such as <code>kubectl top</code> and resource-metrics-based autoscaling.</p>
<p>For cluster operators and application developers, this graduation means that
the API now has the stability guarantees associated with a Kubernetes stable
AP
Kubernetes v1.37: Pod Certificates and Cluster Trust Bundles
Kubernetes Blog · Kubernetes · src 8 · Fri, 28 Aug 2026 10:30:00 -0800 · HIGH 66
<p>Kubernetes brings a wealth of features that make it easy to run your production
workloads securely and reliably. While aspects like scheduling, health checks
and resource limits are probably at the front of your mind, one other important
feature of Kubernetes is production identity — how your workload can
authenticate to other systems in order to do its job.</p>
<p>Up until now, the primary production identity mec
Kubernetes v1.37: Storage Version Migration Enabled by Default
Kubernetes Blog · Kubernetes · src 8 · Mon, 31 Aug 2026 10:30:00 -0800 · HIGH 66
<p>I am excited that <em>storage version migration</em> (SVM) has graduated to General Availability (GA) in Kubernetes v1.37!</p>
<p>After a number of releases of work and testing, the built-in StorageVersionMigration API (<code>storagemigration.k8s.io/v1</code>)
and control plane controller are now fully stable and enabled by default across all v1.37 Kubernetes clusters.</p>
<h2 id="the-problem-with-stale-storage-ve
Kubernetes v1.37: etcd RangeStream Cuts Memory Use on Large List Reads
Kubernetes Blog · Kubernetes · src 8 · Tue, 01 Sep 2026 10:30:00 -0800 · HIGH 66
<p>I am excited to announce that etcd RangeStream is graduating to beta in
Kubernetes v1.37. Paired with etcd v3.7, it reduces the memory the API server and
etcd need to read a large collection, and makes peak usage more predictable.</p>
<h2 id="the-cost-of-large-reads">The cost of large reads<a class="td-heading-self-link" href="https://kubernetes.io/feed.xml#the-cost-of-large-reads"></a></h2><p>The API server serve
Kubernetes v1.37: Scale Workloads to Zero with HorizontalPodAutoscaler
Kubernetes Blog · Kubernetes · src 8 · Wed, 02 Sep 2026 10:30:00 -0800 · HIGH 66
<p>Kubernetes v1.37 includes API support for horizontal autoscaling of workloads down
to zero replicas. This feature is now Beta and enabled by default. A
<a href="https://kubernetes.io/docs/concepts/workloads/autoscaling/horizontal-pod-autoscale/">HorizontalPodAutoscaler</a>
(HPA) that uses a suitable <em>object metric</em> or <em>external metric</em> can now scale a
workload to zero replicas, then bring it back whe
Kubernetes v1.37: DRA Updates
Kubernetes Blog · Kubernetes · src 8 · Thu, 03 Sep 2026 10:30:00 -0800 · HIGH 66
<p>Kubernetes 1.37 is here and <a href="https://kubernetes.io/docs/concepts/scheduling-eviction/dynamic-resource-allocation/">Dynamic Resource Allocation (DRA)</a> keeps pushing past where it started! This release brings DRA Extended Resource support to GA, a milestone the team has been building toward for three straight releases. Several more features graduate to Beta or GA. A fresh batch of alpha features rounds ou
Kubernetes v1.37: Advancing Workload-Aware Scheduling
Kubernetes Blog · Kubernetes · src 8 · Tue, 08 Sep 2026 10:30:00 -0800 · HIGH 66
<p>AI/ML and complex batch workloads continue to push the boundaries of Kubernetes scheduling. Following the foundational workload-centric enhancements introduced in previous releases, Kubernetes v1.37 delivers the next major milestone in the Workload-Aware Scheduling (WAS) journey. In this release, the core Workload and PodGroup APIs—enabling gang scheduling—along with Workload-Aware Preemption (WAP) and shared DRA
Kubernetes v1.37: Native Histograms Graduates to Beta
Kubernetes Blog · Kubernetes · src 8 · Fri, 11 Sep 2026 10:30:00 -0800 · HIGH 66
<p>I'm excited to announce that native histogram support for Kubernetes metrics is graduating to Beta and is enabled by default in Kubernetes v1.37!</p>
<p><em>Native histograms</em> (previously introduced as Alpha in Kubernetes v1.36 under <a href="https://www.kubernetes.dev/resources/keps/5808/">KEP-5808</a>)
bring high-resolution, low-cardinality observability to Kubernetes metrics.
By adopting <a href="https://pr
The Shift to cgroup v2 in Kubernetes: What You Need to Know
Kubernetes Blog · Kubernetes · src 8 · Tue, 06 Oct 2026 10:00:00 -0800 · HIGH 66
<p>In Linux, <em>cgroups</em> (control groups) are a kernel feature used for managing system resources.
Kubernetes uses cgroups to allocate resources like CPU and memory to containers,
ensuring that applications run smoothly without interfering with each other.
With the release of Kubernetes v1.31, support for v1 cgroup management moved into
<a href="https://kubernetes.io/blog/2024/08/14/kubernetes-1-31-moving-cgroup
Why Is My Kubernetes Job Still Pending? Tracing Kueue Admission with Headlamp
Kubernetes Blog · Kubernetes · src 8 · Wed, 14 Oct 2026 10:35:00 -0800 · HIGH 66
<p>You submit a <a href="https://kubernetes.io/docs/concepts/workloads/controllers/job/">Kubernetes Job</a> and
wait for its Pods to appear. A minute passes. Then another. The Job is still suspended, there are no
application logs, and there may not even be a Pod to inspect.</p>
<p>In a cluster managed by <a href="https://kueue.sigs.k8s.io/">Kueue</a>, this can be completely normal. Kueue
may still be deciding whether
FBI Probes Service Selling 153M+ Drivers Licenses
Krebs on Security · Cybersecurity · src 10 · Tue, 01 Sep 2026 22:40:28 +0000 · HIGH 65
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that
Data Broker Radaris Loses Domains in Privacy Fight
Krebs on Security · Cybersecurity · src 10 · Wed, 16 Sep 2026 18:14:22 +0000 · HIGH 65
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that provides for hefty fines against data brokers that publish personal information on state law enforcement officials. In the face
Police arrests 95 suspects in international CSAM crackdown action
BleepingComputer · Cybersecurity · src 9 · Thu, 15 Oct 2026 07:55:38 -0400 · HIGH 64
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups. [...]
Security updates for Wednesday
LWN Headlines · Linux/System · src 9 · Wed, 14 Oct 2026 13:02:10 +0000 · HIGH 63
Security updates have been issued by <b>AlmaLinux</b> (bind9.18, dovecot, flatpak, gd, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base, kernel, opentelemetry-collector, pcre2, and tftp), <b>Debian</b> (curl and keystone), <b>Fedora</b> (aegisub, arm-none-eabi-binutils-cs, avr-binutils, chromium, curl, firefox, kernel, python-jupytext, and xdg-dbus-proxy), <b>Mageia</b> (apache, freec
Introducing Astra for Law
OpenAI News · AI · src 8 · Thu, 17 Sep 2026 00:00:00 GMT · HIGH 60
OpenAI for Law brings frontier intelligence for law, custom firm workflows, connected legal data sources, and legal-grade controls for confidential client work.
Wayfair boosts catalog accuracy and support speed with OpenAI
OpenAI News · AI · src 8 · Fri, 25 Sep 2026 00:00:00 GMT · HIGH 60
Wayfair uses OpenAI models to improve ecommerce support and product catalog accuracy, automating ticket triage and enhancing millions of product attributes at scale.
How Jump Trading is scaling quant research with ChatGPT
OpenAI News · AI · src 8 · Tue, 06 Oct 2026 12:00:00 GMT · HIGH 60
Jump Trading uses OpenAI to expand quantitative research. See how longer-running AI workflows combine multiple data sources with human review.
Fragments: September 1
Martin Fowler · Software Engineering · src 8 · 2026-09-01T15:50:00-04:00 · HIGH 53
<p>Like many readers, I’m wary of AI generated prose. Simon Wilison has written an <a href="https://tools.simonwillison.net/llm-cliche-highlighter#https://martinfowler.com/articles/making-data-ready-for-agentic-ai.html">LLM cliché highlighter</a> - paste in some text, or a URL, and it will flag various patterns common to LLMs. It references a <a href="https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing">wikip
Fragments: September 16
Martin Fowler · Software Engineering · src 8 · 2026-09-16T16:05:00-04:00 · HIGH 53
<p>Reports of agentic hacking continue, in this case it happened back in May and it seems OpenAI did not disclose that they were responsible. <a href="https://simonwillison.net/2026/Sep/12/openai-agents-rubygems/">Simon Willison sees two options:</a></p>
<blockquote>
<ul>
<li>After the Hugging Face and Wiki attacks OpenAI were still unable to review their previous logs and determine that they had previously at
[$] Vendor hooks in the Android kernel
LWN Headlines · Linux/System · src 9 · Thu, 15 Oct 2026 15:09:15 +0000 · MEDIUM 49
Since Android's inception, the kernels it has used have diverged
significantly from the mainline. While many of those differences have been
resolved over time, and the move to the <a href="https://source.android.com/docs/core/architecture/kernel/generic-kernel-image">generic
kernel image</a> has helped to bring Android closer, current devices still
carry a lot of out-of-tree changes. The preferred form for such cha
The Conductor Developer
Martin Fowler · Software Engineering · src 8 · 2026-07-31T09:48:00-04:00 · MEDIUM 48
<p class="precis"><b>TL;DR</b><br /><i>Why I think software development is starting to feel a little more like conducting an orchestra.</i></p>
<img src="https://martinfowler.com/rachels-ramblings/card.png" />
<p>There’s a shift happening in software development that I don’t think we’re talking about clearly enough.</p>
<p>For the last couple of years we’ve framed AI as a productivity tool. How much faster can it wr
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
The Hacker News · Cybersecurity · src 8 · Tue, 13 Oct 2026 14:14:01 +0530 · MEDIUM 48
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says.
Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0.
Affected
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
The Hacker News · Cybersecurity · src 8 · Tue, 13 Oct 2026 22:58:50 +0530 · MEDIUM 48
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
The Hacker News · Cybersecurity · src 8 · Thu, 15 Oct 2026 21:30:26 +0530 · MEDIUM 48
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).
The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives
V7 cuts costs 78% while boosting accuracy with GPT-5.6 Luna
OpenAI News · AI · src 8 · Mon, 21 Sep 2026 00:00:00 GMT · MEDIUM 48
Using GPT-5.6, V7 turns scattered company files into context agents can use to complete complex, source-linked work.
Google DeepMind and Singapore Government collaborate to build fine-tuned AI model for scam detection
Google DeepMind Blog · AI · src 8 · Wed, 14 Oct 2026 02:00:14 +0000 · MEDIUM 48
Learn how Google DeepMind and GovTech Singapore uses lightweight on-device Gemma models to intercept conversational scams in private chats with zero cloud data egress.
ONLYOFFICE 10.0 Released With AI Features, 1,000+ Bug Fixes
Phoronix · Linux/System · src 7 · Tue, 13 Oct 2026 07:43:23 -0400 · MEDIUM 47
ONLYOFFICE 10.0 is now available for this open-source office suite alternative to the likes of LibreOffice...
Mesa Expands NPU Capabilities With Support For YOLOX With PyTorch
Phoronix · Linux/System · src 7 · Tue, 13 Oct 2026 20:54:50 -0400 · MEDIUM 47
While Mesa is predominantly used for GPU drivers, open-source developer Tomeu Vizoso continues advancing the capabilities of NPUs within the Mesa driver stack...
Cloud Hypervisor 54 Released With Live Migration Improvements
Phoronix · Linux/System · src 7 · Wed, 14 Oct 2026 06:17:59 -0400 · MEDIUM 47
Cloud Hypervisor, the Rust-based Virtual Machine Monitor that began as an Intel open-source project and evolved into a multi-vendor Linux Foundation project, is out today with a sizable feature update...
Apple Contributes SSAF Driver To LLVM Clang For Source Code Transformations
Phoronix · Linux/System · src 7 · Wed, 14 Oct 2026 14:45:29 -0400 · MEDIUM 47
Apple compiler engineers have contributed to upstream LLVM/Clang today a Scalable Static Analysis Framework (SSAF) driver for whole-program based analysis and source-to-source code transformations...
Memtest86+ v9.00 Released With Support For ARM64 Memory Testing
Phoronix · Linux/System · src 7 · Thu, 15 Oct 2026 13:58:00 -0400 · MEDIUM 47
The open-source Memtest86+ program that is popular for RAM testing has expanded beyond the x86/x86_64 (and LoongArch64) world to now support memory testing on ARM64/AArch64 hardware...
Linux Kernel Developers Plan To Remove "Assisted-By" Tag Requirement For AI/LLM Usage
Phoronix · Linux/System · src 7 · Tue, 13 Oct 2026 09:28:54 -0400 · MEDIUM 45
Currently there is a policy requirement for Linux kernel patches where AI tools contributed, they should be documented with an "Assisted-by:" tag to make clear AI was used in the creation of said patch. But Linux kernel developers are now looking at dropping this requirement amid the rampant use of AI/LLMs...
I don't like LLMs
Martin Fowler · Software Engineering · src 8 · 2026-09-17T09:50:00-04:00 · MEDIUM 44
<p>I have a lot of mixed feelings about AI and LLM technology. I’m
fascinated by its effect on our profession, excited by the potential gains
in productivity - and thus the products we could rapidly build. On the other
hand, I’m fearful of the damage AI might cause: agent swarms taking over our
virtual and physical infrastructure, designing bio weapons. But, back on my
first hand, LLMs might also design miracle cures
Fragments: September 29
Martin Fowler · Software Engineering · src 8 · 2026-09-29T08:41:00-04:00 · MEDIUM 41
<p><a href="https://simonwillison.net/2026/Sep/24/harder/">Simon Willison:</a></p>
<blockquote>
<p>The more time I spend working with coding agents, the more convinced I am that they make software engineering even harder</p>
<p>We can do amazing things with them, but unlocking their full potential requires extraordinary discipline and knowledge</p>
</blockquote>
<p>This has been a constant impression I get fro
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Krebs on Security · Cybersecurity · src 10 · Mon, 28 Sep 2026 15:08:57 +0000 · MEDIUM 40
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p.
U.K. Sanctions Cryptomus for RU Money Laundering
Krebs on Security · Cybersecurity · src 10 · Wed, 14 Oct 2026 14:22:49 +0000 · MEDIUM 40
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions.
Security updates for Thursday
LWN Headlines · Linux/System · src 9 · Thu, 15 Oct 2026 13:09:44 +0000 · MEDIUM 39
Security updates have been issued by <b>AlmaLinux</b> (environment-modules, flatpak-builder, kernel, kernel-rt, librabbitmq, libreoffice, libsoup, mod_auth_openidc:2.3, nodejs:22, nodejs:24, OpenEXR, opentelemetry-collector, pki-core:10.6, postgresql:12, python-tornado, python36:3.6, ruby:3.3, tftp, and xorg-x11-server), <b>Debian</b> (buildstream, firefox-esr, mariadb, and sogo), <b>Fedora</b> (exim, freerdp, python
Fragments: September 8
Martin Fowler · Software Engineering · src 8 · 2026-09-08T11:22:00-04:00 · MEDIUM 38
<p>Christian Catalini says we’re in a situation where we are <a href="https://catalini.com/ideas/economics-of-ai/">vastly reducing the cost of generating things, but not the cost of verifying them:</a>.</p>
<blockquote>
<p>This explains why the first major AI products appeared in chat, image generation, and code assistance. Not because these were the hardest human problems, but because their outputs were relativel
Ringg’s AI agents resolve up to 65% of customer calls with OpenAI
OpenAI News · AI · src 8 · Wed, 23 Sep 2026 12:00:00 GMT · MEDIUM 38
Using GPT-5.6, Ringg powers multilingual agents across voice, chat, WhatsApp, and web for 90% less cost vs. GPT-4.1.